Re: XML RPC Service

2018-08-09 Thread Mauro Sanna
Please delete me. On Thu, 9 Aug 2018 at 11:06, Jacques Le Roux wrote: > Le 06/08/2018 à 22:00, Bernhard Donaubauer a écrit : > > Jacques Le Roux > > > And there are CVEs pending : > > https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-your.html > > Other TLPs might be

Re: XML RPC Service

2018-08-09 Thread Jacques Le Roux
Le 06/08/2018 à 22:00, Bernhard Donaubauer a écrit : Jacques Le Roux And there are CVEs pending : https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-your.html Other TLPs might be affected, I guess Archiva has been picked because being the 1st in alphabetical order...

Re: XML RPC Service

2018-08-06 Thread Bernhard Donaubauer
Am 19.07.2018 um 17:25 schrieb Bernhard Donaubauer: I think about replacing an old xml-rpc service written in perl with groovy. I'm late but I want to thank you for your efforts and insights. Russel Winder rus...@winder.org.uk wrote: Personally I have used Go, and Python+Flask for this sort

Re: XML RPC Service

2018-07-27 Thread Jacques Le Roux
Le 27/07/2018 à 14:06, Russel Winder a écrit : On Fri, 2018-07-27 at 13:26 +0200, Jacques Le Roux wrote: […] I also read that (eg) medical data transfers still use SOAP (instead of REST) because of the complete confidentiality it guarantees. […] I am not sure which medical IT systems you

Re: XML RPC Service

2018-07-27 Thread Russel Winder
On Fri, 2018-07-27 at 13:26 +0200, Jacques Le Roux wrote: > […] > > I also read that (eg) medical data transfers still use SOAP (instead > of REST) because of the complete confidentiality it guarantees. > […] I am not sure which medical IT systems you are thinking of but the UK NHS systems are

Re: XML RPC Service

2018-07-27 Thread Jacques Le Roux
Le 26/07/2018 à 11:19, Russel Winder a écrit : On Wed, 2018-07-25 at 21:53 +0200, MG wrote: I have no personal experience with either XML-RPC, SOAP or REST (DB Developer, Web-GUI needs covered by Vaadin), but this guy expresses a different (seemingly pragmatic) opinion (and he is using Groovy

Re: XML RPC Service

2018-07-26 Thread Russel Winder
On Wed, 2018-07-25 at 21:53 +0200, MG wrote: > I have no personal experience with either XML-RPC, SOAP or REST (DB > Developer, Web-GUI needs covered by Vaadin), but this guy expresses > a > different (seemingly pragmatic) opinion (and he is using Groovy ;-) > ): >

Re: XML RPC Service

2018-07-25 Thread MG
This Java lib also looks interesting, since it seems quite compact and explicitely mentions support for asynchronous calls (if you need that), which looks like it would lend itself nicely to be wrapped in some Groovy goodness (see below): https://github.com/gturri/aXMLRPC What we have found

Re: XML RPC Service

2018-07-25 Thread MG
I have no personal experience with either XML-RPC, SOAP or REST (DB Developer, Web-GUI needs covered by Vaadin), but this guy expresses a different (seemingly pragmatic) opinion (and he is using Groovy ;-) ):

Re: XML RPC Service

2018-07-24 Thread Russel Winder
I suspect XML-RPC is pure legacy. It evolved into SOAP and that is pure legacy. All the Web Services folk I know are now using RESTful HTTP/HTTPS microservices. On Sat, 2018-07-21 at 16:50 +0200, Jacques Le Roux wrote: > Hi Bernhard, > > Actually XML-RPC is no longer maintained, last fix

Re: XML RPC Service

2018-07-21 Thread Jacques Le Roux
Wait I was too fast, I did not notice it was only about org.codehaus.groovy:groovy-xmlrpc (and not Java Apache XML-RPC) Hopefully it's not affected by the same security issues, I don't know and would be interested about that... Thanks Jacques| | Le 21/07/2018 à 16:50, Jacques Le Roux a écrit 

Re: XML RPC Service

2018-07-21 Thread Jacques Le Roux
Hi Bernhard, Actually XML-RPC is no longer maintained, last fix in3.1.3 is for http://www.openwall.com/lists/oss-security/2011/10/05/10 And there are CVEs pending : https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-your.html Other TLPs might be affected, I guess Archiva has