Re: [Geoserver-users] Geoserver WFS 2.0 combined with app-schema

2018-06-07 Thread Nuno Oliveira
Good point Ben, thanks for the heads up ! On 06/07/2018 01:07 AM, Ben Caradoc-Davies wrote: On 07/06/18 08:37, Nuno Oliveira wrote: Regarding this request you are asking for GML3 ... which implies WFS 1.1.0 and GML 3 schemas. Your target INSPIRE schema uses GML32, so you should request for GML

[Geoserver-users] Geoserver mbtiles generation issue

2018-06-07 Thread unni mana
Hello All. when I tried to generate a mntiles using Geoserver WPS request builder tool, I am getting ahe following error "Feature not available." This layer is a geotiff based on. I was told that feature cannot be added since it is geotiff Please correct my understanding. if so. how ca I gene

[Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Olle Markljung
Hello all I have users that would be helped if curve support for SQL Server became real. I'm not sure if the implementation is needed in GeoServer or GeoTools but I reach out here first. Are there others also seeking this support? I might be able to do the implementation myself but otherwise per

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Andrea Aime
Hi Olle, I did work on the curve support for SQL Server and Oracle, I've built the in memory geometry representation and GML encoding support in the first implementation [1], so believe all you need to do is to add support for parsing curves at the store level, somewhere around here: https://githu

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Mark Prins
On 07-06-18 13:32, Olle Markljung wrote: Hello all I have users that would be helped if curve support for SQL Server became real. I'm not sure if the implementation is needed in GeoServer or GeoTools but I reach out here first. Are there others also seeking this support? Ik had a look into

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
Hi Chris, that's a sensible suggestion. The web site is on gihub, any chance you could do a pull request? I'm swamped... https://github.com/geoserver/geoserver.github.io Cheers Andrea On Thu, Jun 7, 2018 at 4:18 PM, Chris Snider wrote: > Andrea, > > > > It took me a second to find the securit

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Chris Snider
I can try to do that this weekend. I assume master? Chris Snider Senior Software Engineer [cid:image001.png@01D2E6A5.9104F820] From: andrea.a...@gmail.com [mailto:andrea.a...@gmail.com] On Behalf Of Andrea Aime Sent: Thursday, June 07, 2018 8:25 AM To: Chris Snider Cc: Dave Wichers ; geoserver

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Olle Markljung
Hi Andrea and Mark Thank you for the swift response! Andrea, do you have a ballpark number of hours it took to implement the support for curves in Oracle or PostGIS? Mark, did you have an estimation to complete the work you started? If I don’t find the time myself I’ll try to find funding and s

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Andrea Aime
Hi Olle, I have them, but we don't discuss estimates outside of private business inquiries, sorry :-) That said, estimates are personal, they change depending on experience, topic and the like, so they would not be much use anyways. If you decide you want someone else to do it for you, you can con

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Olle Markljung
Hehe yeah I understand :) I’ll try to make the estimate myself. /Olle tors 7 juni 2018 kl. 17:28 skrev Andrea Aime : > Hi Olle, > I have them, but we don't discuss estimates outside of private business > inquiries, sorry :-) > That said, estimates are personal, they change depending on experie

[Geoserver-users] outputformat getfeature 2.0.0 (2.13.1)

2018-06-07 Thread Verbeeck Bart (AIV)
Dear List Why is the default outputformat for a wfs (2.0.0) request in version 2.13.1 "Content-Type: application/gml+xml; version=3.2" It used to be (2.11.1 for instance) "Content-Type: text/xml; subtype=gml/3.2" Even if I ask for "text/xml; subtype=gml/3.2", I receive application/gml+xml; ver

Re: [Geoserver-users] outputformat getfeature 2.0.0 (2.13.1)

2018-06-07 Thread Andrea Aime
As far as I remember, the old format was not compliant with the WFS 2.0 OGC specification and got fixed as a consequence. Cheers Andrea On Thu, Jun 7, 2018 at 4:09 PM, Verbeeck Bart (AIV) < bart.verbe...@kb.vlaanderen.be> wrote: > Dear List > > Why is the default outputformat for a wfs (2.0.0) r

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Chris Snider
Andrea, It took me a second to find the security block. I completely overlooked the blue field. Maybe add a new header under the “User List” User List This list is for end users blah blah blah Reporting Security Vulnerabilities If you encounter a security vulnerability blah blah blah Posting

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
Hi Chris, yes, master. Much appreciated! Cheers Andrea On Thu, Jun 7, 2018 at 4:36 PM, Chris Snider wrote: > I can try to do that this weekend. I assume master? > > > > Chris Snider > > Senior Software Engineer > > [image: cid:image001.png@01D2E6A5.9104F820] > > > > *From:* andrea.a...@gmail.c

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Joe Murphy
Not to try and start a huge discussion; but since the cat is out of the bag so to speak, I also knew of this quite some time(1year+) ago. I don't have the resources to add bugs to the JIRA, but I was able to find/fix locally very easily (what you do with open source). I guess I was wondering if you

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Jim Hughes
Hi Joe, The GitHub security alerts seem to only be available for JavaScript and Ruby. Is there a scanner which would work with a Maven/JVM project that you can recommend? Cheers, Jim On 06/07/2018 02:18 PM, Joe Murphy wrote: Not to try and start a huge discussion; but since the cat is out

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
Hi Jim, Dave already suggested an approach.. that should not be too hard, maybe setting up a Jenkins build that reports only to the PSC... that's not the problem, it's a one time thing. It's upgrading the libraries that will be trouble, we depend on various old ones, we tried to organize a code sp

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Joe Murphy
Sounds like you guys have a solution. But, here's some links, one that looks like it could plugin to your Atlassian Suite, and one that looks like it may answer the Maven question that Jim asked. https://techbeacon.com/13-tools-checking-security-risk-open-source-dependencies-0 https://github.com/

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Jim Hughes
Hi all, Apologies for not reading more carefully.  Looks like https://github.com/OSSIndex/ossindex-maven-plugin and the DependencyCheck plugin are the winners for the Maven ecosystem. Andrea, other PSCers, I got interested in the plugins, and have fiddled with them some this afternoon.  I'm

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread mark
On 06/07/18 22:27, Joe Murphy wrote: https://github.com/jeremylong/DependencyCheck I've been running this Owasp DependencyCheck for about a year on various projects, it can be as easy as adding the following to the travis or jenkins file: mvn org.owasp:dependency-check-maven:aggregate -Dfor

Re: [Geoserver-users] outputformat getfeature 2.0.0 (2.13.1)

2018-06-07 Thread Ben Caradoc-Davies
Bart, the default "Content-Type: application/gml+xml; version=3.2" is required by the WFS 2.0 standard: http://docs.opengeospatial.org/is/09-025r2/09-025r2.html#52 "The optional outputFormat parameter specifies the format used to encode resources in the response to a query operation. The defa

Re: [Geoserver-users] outputformat getfeature 2.0.0 (2.13.1)

2018-06-07 Thread Ben Caradoc-Davies
On 08/06/18 11:24, Ben Caradoc-Davies wrote: Nuno, was this intended? Should a different GML 3.2 Content-Type specified in outputformat override the WFS GML 3.2 Content-Type settings if it matches a supported option? No doubt users specifying outputformat=gml32 will not expect "Content-Type: gm