Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
3) -Djavax.xml.parsers.SAXParserFactory=org.apache.xerces.jaxp.SAXParserFactoryImpl -Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl On Thu, Oct 15, 2020 at 1:41 AM robertlazarski wrote: > Looks like you are running the axis2 client in Weblogic,

Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
Djaxp.debug=1 > -Djavax.xml.parsers.SAXParserFactory=org.apache.xerces.jaxp.SAXParserFactoryImpl > -Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl > generate > C:\Users\leviy\Desktop\save\antOutput3.txt > > > > BR, > > *Yogev Le

Re: axis2-1.7.9 running with invalid JAXP

2020-10-15 Thread robertlazarski
it the Ant lib? > > Is there any flag or any other way to print the parent loader location? > > > > > > BR, > > *Yogev Levi* > > Senior Software Engineer > > *TEOCO Ltd.* > > c: > > +972 52 4455 708 > > p: > > +972 3 9269752 > >

Re: Axis2 status (release)

2020-11-23 Thread robertlazarski
I figured out the OSGi problem, the fix below should allow you to build with the jar update. The goal for the next axis2 release continues to be JDK 11 compilation. We are looking at early next year for the next release. For now, JDK 8 is required for compilation though I have had no problems run

Re: [EXT] Re: Axis2 status (release)

2020-11-24 Thread robertlazarski
xis2-1.7.9/dist/axis2.war On Mon, Nov 23, 2020 at 11:23 PM Jipa, Alexandru-Stefan < alexandrustefan.j...@finastra.com> wrote: > Hi, > > > > And after we successfully compile axis2, what do we need to do in order to > generate axis2.war file? > > > > Th

Re: java.lang.ClassCastException: org.apache.commons.httpclient.Header cannot be cast to org.apache.axis2.context.NamedValue

2020-12-07 Thread robertlazarski
I suggest upgrading your httpclient libs to the latest, and updating your axis2.xml as shown below. You can see how this error was resolved for another user in this Jira issue. https://issues.apache.org/jira/browse/AXIS2-5740 The upcoming Axis2 release will only support the latest httpclient lib

Re: java.lang.ClassCastException: org.apache.commons.httpclient.Header cannot be cast to org.apache.axis2.context.NamedValue

2020-12-07 Thread robertlazarski
ed to use > httpclient3.HTTPSenderImpl, as we don’t even have httpclient 3.x in the > classpatch. > > Is there possibility to instruct sender to use > org.apache.axis2.transport.http.CommonsHTTPTransportSender ? > > > >Thank you > > > > *Fr

Re: [Axis2] Migrating from Apache Axis 1.x to Axis2

2021-01-13 Thread robertlazarski
I saw your original message however it was right before xmas ... plus this question required me to look at the source of both projects and I don't use axis 1.x myself, I just help maintain it. Anyways, this axis2 method is pretty close. https://axis.apache.org/axis2/java/core/apidocs/org/apache/a

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-25 Thread robertlazarski
Axis2 1.7.9 will not build on JDK 11 for a few reasons such as the removal of XDoclet. The latest Axis2 trunk from our git repo does build on JDK 11 ... maybe later too, I haven't got to that yet. git clone https://github.com/apache/axis-axis2-java-core.git Currently in git the Javac source is

Re: axis2 1.7.9 CVEs as reported by owasp: still using log4j version 1 and spring framework 2.5.1

2021-02-26 Thread robertlazarski
This is fixed in the Axis2 git repo as we switched entirely to log4j2. On Fri, Feb 26, 2021 at 1:42 AM Andrew Marlow wrote: > Hello everyone, > > I have noticed that axis2 depends on log4j version 1 and spring framework > 2.5.1. These have significant CVEs. Are there any plans for axis2 to move

Re: axis2 1.7.9 CVEs as reported by owasp: still using log4j version 1 and spring framework 2.5.1

2021-02-26 Thread robertlazarski
Spring is updated too. As an FYI, we now have "dependabot" automatically sending pull requests on deps. On Fri, Feb 26, 2021 at 5:16 AM robertlazarski wrote: > This is fixed in the Axis2 git repo as we switched entirely to log4j2. > > On Fri, Feb 26, 2021 at 1:42 AM And

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread robertlazarski
ich is outside of the build directory. Does anyone have any > ideas please? > > > On Thu, 25 Feb 2021 at 15:37, robertlazarski > wrote: > >> Axis2 1.7.9 will not build on JDK 11 for a few reasons such as the >> removal of XDoclet. >> >> The latest Axis2

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread robertlazarski
On Fri, Feb 26, 2021 at 5:57 AM Andrew Marlow wrote: > > > On Fri, 26 Feb 2021 at 15:26, robertlazarski > wrote: > >> That's a maven error beyond the scope of axis2, but anyways what do these >> commands show? >> >> ls -l /etc/maven/m2.conf >> w

Re: axis2 git clone owasp build problem with com:sun:tools jar

2021-02-26 Thread robertlazarski
There are no known CVE's in git for either Axis 1.x or Axis2. Strangely I don't see that Axis2 dep error via "mvn dependency:analyze" nor do I see that jar in ~/.m2 . On Fri, Feb 26, 2021 at 12:19 AM Andrew Marlow wrote: > Hello everyone, > > I am trying to find out what CVE issues there are wi

Re: axis2 git clone owasp build problem with com:sun:tools jar

2021-02-26 Thread robertlazarski
Are you building with JDK 11? That won't have the system dep for tools.jar, but as mentioned I didn't see it get pulled into the Axis2 build via maven. On Fri, Feb 26, 2021 at 10:23 AM robertlazarski wrote: > There are no known CVE's in git for either Axis 1.x or Axis2. >

Outstanding items for the next Axis2 release

2021-03-08 Thread robertlazarski
All, Please take this opportunity to indicate anything you would like to see in the next Axis2 release. There are no known open CVE issues in any Axis project git repo. Prompt attention to any issue raised by secur...@apache.org is the project's highest priority. For me personally, I'd like to r

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-03-09 Thread robertlazarski
; Do you have a full stack trace? >> >> >>> >>> On my linux mint 20 machine that file is a symbolic link to >>> /etc/maven/m2.conf, a file to which everyone has read access. >>> I have a feeling that the permissioned denied error is due to the >>

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-03-09 Thread robertlazarski
kedBooter.java:126) at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) On Tue, Mar 9, 2021 at 6:20 AM robertlazarski wrote: > I am seeing this issue now running the unit tests. The error is strange > since the linux "which" command for javac shows > /usr/local/jdk-11.0.2/bin/javac and

Re: axis2, tomcat tribes and artifact relocation

2021-03-09 Thread robertlazarski
Thanks for your patience and effort on getting our attention on this. I often say there are no known CVE's in our repos, so it's great to get some community help here when vulnerabilities like this are not exposed from the Github tool Dependabot. Maybe Github has some more tools that would have ca

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-09 Thread robertlazarski
I was wondering if there are any spring boot users. I plan on writing some docs as it is harder than it should be. I was able to successfully implement it though. Where are you stuck exactly? Here's the main init code: package com.alphatheory.configuration; import com.mycompany.ATInit; import o

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-09 Thread robertlazarski
ds to be more prominent in the documentation. > > Best, > Kevin > > On Tue, Mar 9, 2021 at 2:59 PM robertlazarski > wrote: > >> I was wondering if there are any spring boot users. I plan on writing >> some docs as it is harder than it should be. >> >&

Re: build error with JDK8 to do with permissions

2021-03-10 Thread robertlazarski
I ran into similar errors the other day. Build as root until we figure this out. Andreas, I suspect this commit since the stacktrace indicates the problem originates in com.github.veithen.hermetic.HermeticSecurityManager. commit cb808543997b4e5c0fd66b1b8922374b1ae1ee7a Author: Andreas Veithen Da

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-10 Thread robertlazarski
che.org/jira/browse/AXIS2-5340> as a bullet point > would be important as that seems to definitely be a notable breaking change. > > Best, > Kevin > > On Tue, Mar 9, 2021 at 3:29 PM robertlazarski > wrote: > >> I'm not really sure how the axis2.xml docs could be i

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-10 Thread robertlazarski
For JAX-WS I think you may have just used this entry into axis2.xml? On Wed, Mar 10, 2021 at 7:07 AM robertlazarski wrote: > I see. I am looking at the docs now and am making some updates. > > Are you running JAX-WS services? How did you fix it? Did you use a > ServletContex

Re: [Axis2] Clarity in 1.7.x breaking change documentation

2021-03-10 Thread robertlazarski
pringAppContextAwareObjectSupplier > to SpringServletContextObjectSupplier. I considered investigating why it > didn't work as originally set up, but unfortunately I am constrained by a > timeline. I did not try your ServletContextInitializer code snippet. > > Best, > Kevin >

Re: xmlbeans 2.6.0 and CVE-2021-23926

2021-03-12 Thread robertlazarski
Xmlbeans 3.0.1 passed the unit tests, so I made the commit. I believe what happened here is that we rejected the Dependabot pull request to 4.x because it wouldn't build, so we missed the 3.x upgrade which at least solves the CVE. Regards, Robert On Fri, Mar 12, 2021 at 2:40 AM Andrew Marlow wr

Re: when will axis2 version 1.8.0 be released

2021-03-22 Thread robertlazarski
I have several Jira issues assigned to me that I expect to get cleared up in the next couple weeks. Once that gets settled, in order to release we'd need a vote on this list with at least 3 +1 votes and no -1 votes. On Thu, Mar 18, 2021 at 11:13 PM Andrew Marlow wrote: > Hello everyone, > > W

Re: when will axis2 version 1.8.0 be released

2021-04-20 Thread robertlazarski
e. > > On Mon, 22 Mar 2021 at 19:15, robertlazarski > wrote: > >> I have several Jira issues assigned to me that I expect to get cleared up >> in the next couple weeks. >> >> Once that gets settled, in order to release we'd need a vote on this list >>

[Axis2 Java] Fixing Travis builds

2021-05-02 Thread robertlazarski
All, On the URL below: https://travis-ci.com/github/apache/axis-axis2-java-core/requests I am seeing this error: File apache/axis-axis2-java-core:.travis.yml not found on RemoteVcs Looks like we need to add a travis.yml? The builds broke about 4 months ago. Not sure why we never had one before

Re: [Axis2 Java] Fixing Travis builds

2021-05-06 Thread robertlazarski
https://github.com/apache/axis-axis2-java-core/actions. > > Andreas > > On Mon, May 3, 2021 at 2:56 AM robertlazarski > wrote: > >> All, >> >> On the URL below: >> >> https://travis-ci.com/github/apache/axis-axis2-java-core/requests >> >

Re: [Axis2 Java] Fixing Travis builds

2021-05-14 Thread robertlazarski
5:46 AM robertlazarski wrote: > Thanks, it does makes sense to have everything on github. > > For the upcoming Axis2 release, we'll have to update the Axiom snapshots > to their latest release however Axis2 won't compile without Axiom > snapshots. Do we need to wait on an A

[VOTE] Release Apache Axis2 1.8.0

2021-08-01 Thread robertlazarski
This is a vote to release Apache Axis2 1.8.0 Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.0 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/ Maven artifacts: https://repository.apache.org/content/repositories/orgapacheaxis2-1022/ Site: htt

Re: [VOTE] Release Apache Axis2 1.8.0

2021-08-08 Thread robertlazarski
This vote has passed. I'm going to publish the release. Robert On Mon, Aug 2, 2021 at 8:28 AM Nadir Amra wrote: > +1 > > > "robertlazarski" wrote on 08/01/2021 07:37:08 > PM: > > > From: "robertlazarski" > > To: java-dev@axis.apache.o

Re: Migrating from commons-httpclient-3.1 to httpclient-4.5.13

2021-11-08 Thread robertlazarski
Someone else asked about this a few weeks ago. The support of HTTP_METHOD_PARAMS was removed in the migration to httpclient 4.x and there is no current replacement for disabling retries. Anyways, adding the httpclient 4.x method disableAutomaticRetries() before build() at the end of the axis2 clas

Re: WS-SecurityPolicy 1.3 support in Apache Rampart

2021-11-30 Thread robertlazarski
Axis2 is still being developed - we just had a release this past August. There is an upcoming Rampart release on the agenda, with upgraded libs to support the latest Axis2 release. As far as adding new features to Rampart, until now there has been little interest in the community for it and not m

Re: [Axis] - QUERY regarding the Axis2 1.7.9

2022-02-16 Thread robertlazarski
The latest release is 1.8.0. I took a quick look around ... see the commit below for the full details. Best I can tell, it seems like what you are looking for is org.apache.axiom.util.stax.XMLStreamWriterUtils.writeDataHandler() . commit 4459e012b78572ffa04bd1000461d479bcc553fa Author: Andreas V

[VOTE] Release Apache Rampart 1.8.0

2024-12-01 Thread robertlazarski
This is a vote to release Apache Rampart 1.8.0 Git tag: https://github.com/apache/axis-axis2-java-rampart/releases/tag/v1.8.0 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/rampart/ Maven artifacts: https://repository.apache.org/content/repositories/orgapacheaxis2-1025 Si

Re: [VOTE] Release Apache Rampart 1.8.0

2024-12-04 Thread robertlazarski
t; On Sun, Dec 01, 2024 at 07:14:14AM -1000, robertlazarski wrote: > > This is a vote to release Apache Rampart 1.8.0 > > > > Git tag: > > https://github.com/apache/axis-axis2-java-rampart/releases/tag/v1.8.0 > > > > Distributions: > > https://dis

Re: [VOTE] Release Apache Rampart 1.8.0

2024-12-10 Thread robertlazarski
lease >> >> >> >>- Downloaded the source tar.gz and spot checked some files >>- Verified the links listed below >> >> >> >> -- >> >> Tom Jordahl >> >> >> >> >> >> *From: *robertlazarski &g

[Announce] Release of Apache Rampart 1.8.0

2024-12-10 Thread robertlazarski
The Apache Axis2 / Rampart team is pleased to announce the general availability of the Rampart 1.8.0 release. This will be the last Rampart version that supports the javax namespace instead of jakarta. Rampart 2.0.0 will support Jakarta and Tomcat 11 / Wildfly 32. The new version can be downloade

Re: Axis2 2.0.0 question

2024-12-17 Thread robertlazarski
Hello, The development has nearly completed, and the main focus now is fixing open Jira issues that are not related to Jakarta. Because we are an open source project, any Axis2 user can help speed up this process by testing our latest code. https://github.com/apache/axis-axis2-java-core Compili

Re: AxisHttpConnectionImpl.java throws an ioexception when the client closes the connection

2025-05-05 Thread robertlazarski
Thanks for bringing this up. I didn't know about this. That axis2 class was the hardest part of the httpclient5 migration. It requires some time and frankly courage I don't have this week. Anyone on this list can submit a Github PR as this lib is what makes axis2 possible more than just about any

Re: Need help in adding JSON/Rest interface to current SOAP axis2 service implementation

2025-02-18 Thread robertlazarski
If you are looking at a pure JSON only service, the are the docs for 1.8.2 however we are about to start a release vote on 2.0.0 that will support jakarta and Tomcat 11 / Wildfly 32. https://axis.apache.org/axis2/java/core/docs/json-springboot-userguide.html There are other JSON use cases in thes

Re: Release 2.0.0

2025-03-03 Thread robertlazarski
I just commented in AXIS2-6051 - some late issues came up but we have a hard cut off to start a release vote on Wednesday. I am about to make some commits today, waiting for some feedback on AXIS2-6080 but I am pretty sure that after I made a commit they just have some issues on their end to work

[Announce] Release of Apache Axis2 2.0.0

2025-03-10 Thread robertlazarski
The Apache Axis2 team is pleased to announce the general availability of the Axis2 2.0.0 release. The new version can be downloaded here: http://axis.apache.org/axis2/java/core/download.cgi It is also available from Maven central. -- The Apache Axis2 team

Re: [VOTE] Release Apache Axis2 2.0.0

2025-03-11 Thread robertlazarski
anks you! >> >> Andreas >> >> Am 05.03.25 um 14:39 schrieb robertlazarski: >> > Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/ >> > v2.0.0 < >> https://github.com/apache/axis-axis2-java-core/releases/tag/v2.0.0>

[VOTE] Release Apache Axis2 2.0.0

2025-03-05 Thread robertlazarski
Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/v2.0.0 Distributions: https://dist.apache.org/repos/dist/dev/axis/axis2/java/core/2.0.0/ Maven artifacts: https://repository.apache.org/content/repositories/orgapacheaxis2-1027/ Site: https://axis.apache.org/axis2/java/core-sta

Re: Release 2.0.0

2025-03-05 Thread robertlazarski
Please vote for the release on the dev list if you are a committer (committers are automatically PMC for Axis2) as we need 3 binding votes. On Tue, Mar 4, 2025 at 4:14 AM Christian Ortlepp < christian.ortl...@hypergene.com> wrote: > Ok great, thank you! > On 03.03.25 13:02, robertla

<    1   2