On Wed, Dec 29, 2010 at 12:20 PM, Ruwan Linton <[email protected]>wrote:
> Hi Andreas, > > Please see my comments inline; > > On Tue, Dec 28, 2010 at 5:48 PM, Andreas Veithen < > [email protected]> wrote: > >> There is another issue with that release caused by the change in >> r1051839, which adds http://dist.wso2.org/maven2 as a repository. The >> problem is that this repository is not properly managed. > > > Well as of what you have found this statement seems to be correct, but it > is a mistake that we have done, and we are managing the WSO2 m2 repo > properly. > > >> It contains >> artifacts with the same groupId, artifactId and version as Maven >> central, but with different content. Example: >> >> >> http://dist.wso2.org/maven2/org/apache/axis2/addressing/1.5/addressing-1.5.pom >> >> http://repo1.maven.org/maven2/org/apache/axis2/addressing/1.5/addressing-1.5.pom > > > Regarding this particular issue, if you carefully have a look, the pom on > the WSO2 m2 repo points to the 1.5-wso2v4 as it's parent, and the mistake > there was that the addressing version has not been updated and it is > deployed as a 1.5 version. I guess this happened because Axis2 fails to > resolve the module version with letters in the trailing part like wso2v4. > > >> >> >> This threatens the stability of the build of the Rampart project as >> well as downstream projects. We had lots of issues with the java.net >> repository, which is also not managed properly, and Axis2 now no >> longer relies on this repository. We should not make the same mistake >> again. >> > > I am not quite sure why the WSO2 m2 repo is being added to rampart as I do > not see any specific WSO2 dependency being added to rampart. > Sorry for being late to reply. We had to add this repository in order to get opensaml-1.1.406 artifacts which contains a bug fix which is required for certain WS-Trust related scenarios to work out of the box. Rampart 1.5 [1] was also released with having WSO2 M2 repo listed as a repository due to some issues we had (I can't recall the exact reason). So we added WSO2 M2 repo, which contains this patched version of OpenSAML 1.1 artifacts. If we can push these OpenSAML-1.1.406 related artifacts into an Apache repo, this we can remove the newly added repository entry. Thanks, Thilina > Being said that we are managing the repository properly and we are in the > process of getting Nexus or some infrastructure inplace for managing the > repo decently. > > Thanks, > Ruwan > > >> >> Therefore my vote is -1. >> >> Andreas >> >> On Thu, Dec 23, 2010 at 05:37, Selvaratnam Uthaiyashankar >> <[email protected]> wrote: >> > Devs, >> > >> > This is the vote for Apache Rampart 1.5.1 release. >> > >> > Please review the signed artifacts: >> > >> > http://people.apache.org/~shankar/rampart/1.5.1/dist/<http://people.apache.org/%7Eshankar/rampart/1.5.1/dist/> >> > >> > The m2 repository is available at: >> > http://people.apache.org/~shankar/rampart/1.5.1/m2_repo/<http://people.apache.org/%7Eshankar/rampart/1.5.1/m2_repo/> >> > >> > The site is temporarily hosted at: >> > http://people.apache.org/~shankar/rampart/1.5.1/site/<http://people.apache.org/%7Eshankar/rampart/1.5.1/site/> >> > >> > SVN Info: >> > https://svn.apache.org/repos/asf/axis/axis2/java/rampart/tags/v1.5.1 >> > >> > It was tested against Axis2 release candidates hosted in: >> > http://people.apache.org/~veithen/1.5.4/<http://people.apache.org/%7Eveithen/1.5.4/> >> > >> > Here's my +1 (binding) to declare the above dist as Apache Rampart 1.5.1 >> > >> > thanks, >> > Shankar >> > >> > --------------------------------------------------------------------- >> > To unsubscribe, e-mail: [email protected] >> > For additional commands, e-mail: [email protected] >> > >> > >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> >> > > > -- > Ruwan Linton > Software Architect & Product Manager > WSO2 Inc.; http://wso2.org > > Lean . Enterprise . Middleware > > phone: +1 408 754 7388 ext 51789 > email: [email protected]; cell: +94 77 341 3097 > blog: http://blog.ruwan.org > linkedin: http://www.linkedin.com/in/ruwanlinton > google: http://www.google.com/profiles/ruwan.linton > tweet: http://twitter.com/ruwanlinton >
