Re: [Dspace-devel] DSpace and Continuous Delivery (and a tangent on provisioning)?

2014-03-06 Thread Àlex Magaz Graça
El dia dv 13 des 2013 14:38:05 CET, Pottinger, Hardy J. va escriure:
 I'll make a page for it, will let you know.

 --Hardy

 Sent from my iPad

 On Dec 13, 2013, at 7:05 AM, Àlex Magaz Graça alexandre.ma...@udl.cat 
 wrote:

 El dia dv 13 des 2013 13:04:40 CET, Pottinger, Hardy J. va escriure:
 Hi, Àlex, that's very interesting! Would you consider writing up your
 project and sharing with the community? There's always room for such
 information on the DSpace wiki, or if you have a workplace blog and are
 already writing about it, would you be able to share the link? Thanks!.

 --
 HARDY POTTINGER pottinge...@umsystem.edu
 University of Missouri Library Systems
 http://lso.umsystem.edu/~pottingerhj/
 https://MOspace.umsystem.edu/
 And remember, also added the Princesss of Sweet Rhyme, that many places
 you would like to see are just off the Map and many things you want to
 know are just out of sight or a little beyond your reach. But someday
 you'll reach them after all, for what you learn today, for no reason at
 all, will help you discover all the wonderful secrets of tomorrow.

 --Norton Juster, The Phantom Tollbooth




 On 12/13/13 3:36 AM, Àlex Magaz Graça alexandre.ma...@udl.cat wrote:


 Hi Hardy,

 We are in the process of setting up the deployment through Jenkins, as
 it is already used for other projects. I haven't used any other similar
 system, so I can't compare it, however, I can say it's easy to set up
 and has lots of plugins to do all kind of suff.

 Cheers,
 Àlex

 Yes, sure, I'll add it to the wiki as soon as I have it working. By the way, 
 which page would be more appropiate to add this information?

 Cheers,
 Àlex

Sorry, I've been busy lately and I had to postpone this until recently. 
Now, I've finally managed to finish the Jenkis job definition. If you 
are still interested, I can publish it in the wiki.

Cheers,
Àlex

--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk
___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Arslan Farooq created an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Issue Type:

  Bug




Affects Versions:


 4.1




Assignee:


 Unassigned




Created:


 06/Mar/14 9:37 AM




Priority:

  Minor




Reporter:

 Arslan Farooq










 Originally reported here: http://dspace.2283337.n4.nabble.com/Item-Submission-Long-Delays-10-minutes-after-Upgrade-from-4-0-to-4-1-td4671942.html   I upgraded DSpace to 4.1 from 4.0. Everything went without any error.   However, when submitting an item to the collection (in the Upload step -- 1.5 MB text or pdf), it takes about 10-12 minutes before Review screen appears. The browser status bar just stays at Waiting for localhost   After that, each step in Submission  Workflow, like, reviewer's approval, editor's approval also take 10-12 minutes each to complete.   dspace.cfg looks normal to me. There is nothing odd compared to the backed up dspace.cfg from 4.0.   The Log files are attached for today.   One thing that may give some clue is that running [dspace]/bin/dspace version command shows an Exception:   Exception: unsupported protocol: 'localhost'  java.lang.IllegalStateException: unsupported protocol: 'localhost'   Complete output in output_of_dspace_version.txt.   I even changed all localhost instances in dspace.cfg to 127.0.0.1 just to see if it solves the problem. No luck.   Sorry, forgot to mention one link that looks interesting:   https://issues.apache.org/jira/browse/HTTPCLIENT-897








  

[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr assigned an issue to Mark H. Wood


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Ivan Masr




Assignee:

 MarkH.Wood












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Ivan Masr




Assignee:

 IvanMasr












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Ivan Masr




Reviewer:

 IvanMasr












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr commented on an issue


















  Re: commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










 I tried to reproduce this (dspace version command stacktrace) on two instances of 4.1 (demo and my local build), but couldn't.   Please, send your output of the following command. We're interested in the form of URLs.  psql -c SELECT * FROM webapp   Also please attach your dspace.cfg with sensitive information redacted.   As you can see in DS-1577, we do plan to upgrade to a newer version of commons-httpclient, but this is a big change planned for DSpace 5 (because of its potential to break things like this).












   

 Add Comment

























 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 







 Originally reported here: http://dspace.2283337.n4.nabble.com/Item-Submission-Long-Delays-10-minutes-after-Upgrade-from-4-0-to-4-1-td4671942.html   I upgraded DSpace to 4.1 from 4.0. Everything went without any error.   However, when submitting an item to the collection (in the Upload step -- 1.5 MB text or pdf), it takes about 10-12 minutes before ...















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 








 

[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Ivan Masr




Attachment:

 output_of_dspace_version.txt




Attachment:

 localhost.2014-03-06.log




Attachment:

 dspace.log.2014-03-06




Attachment:

 catalina.2014-03-06.log












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel 

[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread Arslan Farooq (DuraSpace JIRA)
Title: Message Title










 

 Arslan Farooq commented on an issue


















  Re: commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










 Hi,  Thank you guys!   The output of psql -c SELECT * FROM webapp is:   webapp_id | appname | url | started | isui  ---+-+-+-+--  62 | XMLUI | localhost:8080 | 2014-02-11 16:40:39.596 | 1  63 | JSPUI | localhost:8080 | 2014-02-11 16:40:42.831 | 1  64 | XMLUI | localhost:8080 | 2014-02-11 16:40:45.645 | 1  7 | XMLUI | 127.0.0.1:8282 | 2014-02-10 17:08:46.794 | 1  135 | XMLUI | http://localhost:8080/xmlui | 2014-03-05 17:14:46.953 | 1  9 | XMLUI | localhost:8080 | 2014-02-10 18:02:20.397 | 1  140 | XMLUI | http://localhost:8080/xmlui | 2014-03-06 14:56:04.62 | 1  72 | JSPUI | localhost:8080 | 2014-02-12 16:52:40.353 | 1  73 | XMLUI | localhost:8080 | 2014-02-12 16:52:43.102 | 1  78 | JSPUI | localhost:8080 | 2014-02-13 08:50:45.938 | 1  79 | XMLUI | localhost:8080 | 2014-02-13 08:50:51.29 | 1  109 | XMLUI | localhost:8080 | 2014-02-13 16:59:01.765 | 1  110 | XMLUI | localhost:8080 | 2014-02-14 15:45:42.298 | 1  111 | XMLUI | localhost:8080 | 2014-02-14 16:07:52.672 | 1  112 | XMLUI | localhost:8080 | 2014-02-17 16:02:36.885 | 1  113 | XMLUI | localhost:8080 | 2014-02-25 16:24:47.693 | 1  114 | XMLUI | localhost:8080 | 2014-02-26 08:48:07.988 | 1  115 | XMLUI | localhost:8080 | 2014-02-27 08:56:50.43 | 1  119 | XMLUI | localhost:8080 | 2014-03-03 09:01:18.319 | 1  121 | XMLUI | localhost:8080 | 2014-03-04 09:15:03.217 | 1  122 | XMLUI | localhost:8080 | 2014-03-04 11:06:31.851 | 1  (21 rows)   And the dspace.cfg is attached as well.   Thanks again,












   

 Add Comment

























 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 







 Originally reported here: http://dspace.2283337.n4.nabble.com/Item-Submission-Long-Delays-10-minutes-after-Upgrade-from-4-0-to-4-1-td4671942.html   I upgraded DSpace to 4.1 from 4.0. Everything went without any error.   However, 

[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread Washington Ribeiro (DuraSpace JIRA)
Title: Message Title










 

 Washington Ribeiro updated an issue


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










 File with the requested changes










Change By:

 Washington Ribeiro




Attachment:

 Messages_pt_BR.properties












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread Washington Ribeiro (DuraSpace JIRA)
Title: Message Title










 

 Washington Ribeiro updated an issue


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Washington Ribeiro




Attachment:

 Messages_pt_BR.properties












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread Washington Ribeiro (DuraSpace JIRA)
Title: Message Title










 

 Washington Ribeiro commented on an issue


















  Re: Complete Update translation of JSPUI pt_BR 










 Hi Ivan,   I've send the translation file with the requested changes.   Best,  Washington












   

 Add Comment

























 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 







 Follows the pt_BR translation file of the JSPUI interface. That is a extention of the Tiago Murakami issue (https://jira.duraspace.org/browse/DS-1911). This work was done in the Brazilian Institute for Information in Science and Technology - IBICT.















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net

[Dspace-devel] [DuraSpace JIRA] (DS-1938) Replace insecure MD5 checksum calculation

2014-03-06 Thread Christian Scheible (DuraSpace JIRA)
Title: Message Title










 

 Christian Scheible created an issue


















 DSpace /  DS-1938



  Replace insecure MD5 checksum calculation 










Issue Type:

  Improvement




Affects Versions:


 5.0




Assignee:


 Unassigned




Created:


 06/Mar/14 12:59 PM




Priority:

  Minor




Reporter:

 Christian Scheible










 As is known MD5 is vulnerable against collision attacks. So the checksum calculation should be replaced by a more reliable hash function like SHA-2.   Affected classes from dspace-api are:   1. org.dspace.checker.BitstreamInfoDAO: 2 SQL INSERT Strings (INSERT_MISSING_CHECKSUM_BITSTREAMS and INSERT_MISSING_CHECKSUM_BITSTREAMS_ORACLE). They add MD5 to the query if no checksum algorithm is stored for a bitstream.   2. org.dspace.checker.CheckerCommand: Compares calculated checksums with the currently saved files. If no checksum algorithm is stored in BiststreamInfo it uses MD5.   3. org.dspace.BitstreamStorageManager: During reigister/store a MD5 hash is calculated and stored in the DB.   Maybe it is possible to add a config option like checksum.algorithm  












   

 Add Comment



   

[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Ivan Masr




Status:

 MoreDetailsNeeded Accepted












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr closed an issue as Fixed



















 Translation commited. It will be part of the next released langpack.   https://github.com/DSpace/dspace-api-lang/commit/623746c67767ecd2158b468a7100651832143e34









 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Ivan Masr




Resolution:

 Fixed




Status:

 Accepted Closed












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Ivan Masr




Reviewer:

 IvanMasr












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Ivan Masr




Affects Version/s:

 4.2












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Ivan Masr




Affects Version/s:

 4.2




Fix Version/s:

 4.2












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1932) Complete Update translation of JSPUI pt_BR

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr assigned an issue to Ivan Masr


















 DSpace /  DS-1932



  Complete Update translation of JSPUI pt_BR 










Change By:

 Ivan Masr




Assignee:

 IvanMasr












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1938) Replace insecure MD5 checksum calculation

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr closed an issue as Won't Fix



















 I'm aware of the collision vulnerability in MD5 and its unsuitability for security applications like signature schemes. However, in DSpace, it is not used for any security-related purpose anymore (in the past it was used for password hashes). This application of MD5 is detection of bitrot, not protection against a malicious attacker who would have to bypass the DSpace application layer to replace the bitstream on disk with a forged bitstream with a colliding hash. Thus there is no real need for us to change the hash algorithm. While this would be a trivial change in the code, such change would necessitate a migration path for all users that involves recalculating all checksums - a high cost to a low benefit. Therefore I'm closing this as won't fix. Please, don't let this discourage you from reporting any problems which might be security issues with DSpace.









 DSpace /  DS-1938



  Replace insecure MD5 checksum calculation 










Change By:

 Ivan Masr




Resolution:

 Won'tFix




Status:

 Received Closed












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 






  

[Dspace-devel] [DuraSpace JIRA] (DS-1938) Replace insecure MD5 checksum calculation

2014-03-06 Thread Mark H. Wood (DuraSpace JIRA)
Title: Message Title










 

 Mark H. Wood commented on an issue


















  Re: Replace insecure MD5 checksum calculation 










 I must agree that we should look at how we are using these hashes before we can select better ones. Protecting secrets (PasswordHash), detecting random corruption (org.dspace.checker.*), and distributing files equally across filesystem structures (BitstreamStorageManager) are different in nature and may require different kinds of hashes. All are worth further consideration, but I am not so sure that *any* crypto hash is the best choice for non-crypto use. Crypto hashes mainly have the virtue of being readily available.












   

 Add Comment

























 DSpace /  DS-1938



  Replace insecure MD5 checksum calculation 







 As is known MD5 is vulnerable against collision attacks. So the checksum calculation should be replaced by a more reliable hash function like SHA-2.   Affected classes from dspace-api are:   1. org.dspace.checker.BitstreamInfoDAO: 2 SQL INSERT Strings (INSERT_MISSING_CHECKSUM_BITSTREAMS and INSERT_MISSING_CHECKSUM_BITSTREAMS_ORACLE). They add MD5 to th...















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 













Re: [Dspace-devel] Let's Talk about DSpace Features IRC Meeting - Weds, March 19

2014-03-06 Thread Tim Donohue
Hi All,

I've now created a Wiki page for this meeting...that way everyone can 
start to get a sense of what topics will be discussed/brainstormed on 3/19:

https://wiki.duraspace.org/display/DSPACE/DevMtg+2014-03-19+-+Let%27s+Talk+About+Features

We still have plenty of room for more topics. Feel free to send them 
along to me, or even add details to the Wiki page itself.

- Tim

On 3/5/2014 3:17 PM, Tim Donohue wrote:
 Hi Developers / Tech folks,

 We'd like to welcome anyone and everyone to join / take part in / lurk
 in our first Let's Talk about Features IRC meeting.

 What is it? A developer meeting devoted entirely to discussion of
 possible new features to add to DSpace 5.0 (and beyond).

 When: Weds, March 19 at 20:00 UTC
 Where: #duraspace IRC (on freenode.net)
 How: Just login to IRC, or contact Tim to get your idea added to the agenda

 The purpose of this meeting is to share and discuss:
 * New DSpace features you or your institution are already working on (or
 may have already completed)
 * New DSpace features or ideas you'd love to collaborate with others on
 * Anything you'd like to give back to the community and donate to the
 next release of DSpace (version 5.0 scheduled for late 2014)

 It is an opportunity to share your ideas or half-finished code with
 other DSpace developers and committers (and get early feedback or find
 collaborators). It's also an opportunity to brainstorm new collaborative
 projects, and/or locate others developers who may want to help you turn
 your idea into code.

 We plan to hold these Let's Talk about Features meetings on the third
 Weds of the month, up until the DSpace 5.0 Feature Freeze (date TBA -
 likely Sept or Oct).

 PLEASE NOTE: In order to ensure there is time allotted to discuss your
 feature/code, please email me (tdono...@duraspace.org) to get added to
 the official meeting agenda. We will attempt to discuss as much as we
 can within one hour (or so). But, if there is high demand, we may need
 to reschedule some discussions for later meetings.

 Thanks! If you have any questions, please let us know!

 - Tim


--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk
___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1906) Shibboleth attributes may need to be reconverted

2014-03-06 Thread Pascal-Nicolas Becker (DuraSpace JIRA)
Title: Message Title










 

 Pascal-Nicolas Becker commented on an issue


















  Re: Shibboleth attributes may need to be reconverted 










 I just saw, that my patch my lead to a Null Pointer Exception, which gets caught. Nevertheless the NPE was easy to fix. I just updated the PR, would be glad if someone could test my patch soon.












   

 Add Comment

























 DSpace /  DS-1906



  Shibboleth attributes may need to be reconverted 







 Shibboleth attributes are UTF-8 encoded by default. Some servlet container converts them from ISO-8859-1 to UTF-8, ignoring that they already are UTF-8 encoded. If the attributes includes characters that have different byte sequences in ISO-8859-1 then in UTF-8 these characters get destroyed.   https://wiki.shibboleth.net/confluence/display/SHIB2/NativeS...















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to 

[Dspace-devel] [DuraSpace JIRA] (DS-1582) All DSpaceObjects should have metadata support

2014-03-06 Thread Mark H. Wood (DuraSpace JIRA)
Title: Message Title










 

 Mark H. Wood updated an issue


















 DSpace /  DS-1582



  All DSpaceObjects should have metadata support 










Change By:

 Mark H. Wood




Documentation Status:

 Needed NotRequired




Assignee:

 MarkH.Wood




Status:

 VolunteerNeeded Accepted












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1919) Solr Search Empty FilterQuery BUG

2014-03-06 Thread Raul Ruiz (DuraSpace JIRA)
Title: Message Title










 

 Raul Ruiz commented on an issue


















  Re: Solr Search Empty FilterQuery BUG 










 Hi all,   Possible fix to this bug:   Add this lines on search/discovery.jsp   Line 148:  function validateFilters(){  return document.getElementById(filterquery).value.length 0;  }   Line 288:  input type=text id=filterquery name=filterquery size=15 required/  input type=hidden value=%= rpp % name=rpp /  input type=hidden value=%= sortedBy % name=sort_by /  input type=hidden value=%= order % name=order /  input type=submit value=fmt:message key=jsp.search.filter.add/ _onclick_=return validateFilters() /   Also you can add an alert on _javascript_ function.   Best regards   Raul 












   

 Add Comment

























 DSpace /  DS-1919



  Solr Search Empty FilterQuery BUG 







 The bug appears while submitting a discovery search with a filterquery without content. You can try it at the following link:   http://demo.dspace.org/jspui/simple-search?location=query=filtername=titlefiltertype=equalsfilterquery=rpp=10sort_by=scoreorder=desc















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get 

[Dspace-devel] [DuraSpace JIRA] (DS-1919) Solr Search Empty FilterQuery bug

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1919



  Solr Search Empty FilterQuery bug 










Change By:

 Ivan Masr




Status:

 Received Accepted












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1919) Solr Search Empty FilterQuery bug

2014-03-06 Thread DuraSpace JIRA
Title: Message Title










 

 Ivan Masr updated an issue


















 DSpace /  DS-1919



  Solr Search Empty FilterQuery bug 










 I quickly tested it on master - it fixes the problem (both using _javascript_ and by adding the required attribute).   Pull request for master:  https://github.com/DSpace/DSpace/pull/500










Change By:

 Ivan Masr




Fix Version/s:

 4.2




Fix Version/s:

 5.0




Labels:

 has-patchhas-pull-request




Summary:

 SolrSearchEmptyFilterQuery BUG bug












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 













[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread Arslan Farooq (DuraSpace JIRA)
Title: Message Title










 

 Arslan Farooq updated an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Arslan Farooq




Attachment:

 dspace_version_ouput.txt












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread Arslan Farooq (DuraSpace JIRA)
Title: Message Title










 

 Arslan Farooq updated an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Arslan Farooq




Attachment:

 dspace_version_ouput.txt












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread Arslan Farooq (DuraSpace JIRA)
Title: Message Title










 

 Arslan Farooq commented on an issue


















  Re: commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










 Hi,  I did a fresh DSpace 4.1 install on my laptop, and I am unable to reproduce the problem. It's working fine (even though the dspace.cfg is same like I have on server where I upgraded from 4.0 to 4.1).   Item submission, approval work fine as well.   Output of dspace version is attached.   So there must be something wrong with my 4.0 to 4.1 installation.   -- Arslan












   

 Add Comment

























 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 







 Originally reported here: http://dspace.2283337.n4.nabble.com/Item-Submission-Long-Delays-10-minutes-after-Upgrade-from-4-0-to-4-1-td4671942.html   I upgraded DSpace to 4.1 from 4.0. Everything went without any error.   However, when submitting an item to the collection (in the Upload step -- 1.5 MB text or pdf), it takes about 10-12 minutes before ...















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off 

[Dspace-devel] [DuraSpace JIRA] (DS-1937) commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost')

2014-03-06 Thread Arslan Farooq (DuraSpace JIRA)
Title: Message Title










 

 Arslan Farooq updated an issue


















 DSpace /  DS-1937



  commons-httpclient problem (IllegalStateException: unsupported protocol: 'localhost') 










Change By:

 Arslan Farooq




Attachment:

 output_of_dspace_version_7-Mar-2014.txt












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel


[Dspace-devel] [DuraSpace JIRA] (DS-1184) Email Link Problem

2014-03-06 Thread Viral Asjola (DuraSpace JIRA)
Title: Message Title










 

 Viral Asjola commented on an issue


















  Re: Email Link Problem 










 Dear Mr. Tim Donohue,   Thank you very much for the help.  












   

 Add Comment

























 DSpace /  DS-1184



  Email Link Problem 







 Bug Detail: In JSPUI, at the time of registering new user the system sends an email to the email id which contains link to activate the account. When we click on that link it opens the page in XMLUI. Same way if user wants to retrieve password using Forgotten Password process same way an email will contain link of a XMLUI.  So, the bug is instead of JSPU...















 This message was sent by Atlassian JIRA (v6.1.7#6163-sha1:94d557d)




 












--
Subversion Kills Productivity. Get off Subversion  Make the Move to Perforce.
With Perforce, you get hassle-free workflows. Merge that actually works. 
Faster operations. Version large binaries.  Built-in WAN optimization and the
freedom to use Git, Perforce or both. Make the move to Perforce.
http://pubads.g.doubleclick.net/gampad/clk?id=122218951iu=/4140/ostg.clktrk___
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net