Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh <[email protected]>
apache · Feb 11, 2020 · 1007e5f · 1007e5f
1 parent 9cda9b1
commit 1007e5f
Show file tree

Hide file tree

Showing 81 changed files with 81 additions and 81 deletions.
diff --git a/abdera-0.4.0-incubating/pom.xml b/abdera-0.4.0-incubating/pom.xml
@@ -130,7 +130,7 @@
  <repository>
  <id>apache.incubator</id>
  <name>Apache Incubator Repository</name>
- <url>http://people.apache.org/repo/m2-incubating-repository</url>
+ <url>https://people.apache.org/repo/m2-incubating-repository</url>
  </repository>
  </repositories>
 

diff --git a/casbah-2.1.2/pom.xml b/casbah-2.1.2/pom.xml
@@ -53,7 +53,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.1.5-1/pom.xml b/casbah-2.1.5-1/pom.xml
@@ -53,7 +53,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.6.2/pom.xml b/casbah-2.6.2/pom.xml
@@ -54,7 +54,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.6.3/pom.xml b/casbah-2.6.3/pom.xml
@@ -54,7 +54,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.6.4/pom.xml b/casbah-2.6.4/pom.xml
@@ -54,7 +54,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.7.2/pom.xml b/casbah-2.7.2/pom.xml
@@ -54,7 +54,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.7.3/pom.xml b/casbah-2.7.3/pom.xml
@@ -54,7 +54,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/casbah-2.8.0/pom.xml b/casbah-2.8.0/pom.xml
@@ -54,7 +54,7 @@
  <repositories>
  <repository>
  <id>releases.scala-tools.org</id>
- <url>http://scala-tools.org/repo-releases</url>
+ <url>https://scala-tools.org/repo-releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/commons-csv-1.0/pom.xml b/commons-csv-1.0/pom.xml
@@ -71,7 +71,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  </repository>
  </repositories>
 

diff --git a/drools-4.0.7/pom.xml b/drools-4.0.7/pom.xml
@@ -71,7 +71,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.org/nexus/content/groups/public-jboss/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public-jboss/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/drools-5.1.1/pom.xml b/drools-5.1.1/pom.xml
@@ -79,7 +79,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.org/nexus/content/groups/public-jboss/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public-jboss/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/drools-5.5.0/pom.xml b/drools-5.5.0/pom.xml
@@ -67,7 +67,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.org/nexus/content/groups/public-jboss/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public-jboss/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/drools-5.6.0/pom.xml b/drools-5.6.0/pom.xml
@@ -67,7 +67,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.org/nexus/content/groups/public-jboss/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public-jboss/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/flatpack-3.2.0/pom.xml b/flatpack-3.2.0/pom.xml
@@ -74,7 +74,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/gdata-1.41.1/pom.xml b/gdata-1.41.1/pom.xml
@@ -80,7 +80,7 @@
  <repository>
  <id>smx-m2-repo</id>
  <name>ServiceMix M2 Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo/</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/gentlyweb-utils-1.5/pom.xml b/gentlyweb-utils-1.5/pom.xml
@@ -50,7 +50,7 @@
  <repositories>
  <repository>
  <id>fusesource</id>
- <url>http://repo.fusesource.com/nexus/content/groups/public/</url>
+ <url>https://repo.fusesource.com/nexus/content/groups/public/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/guice-2.0/pom.xml b/guice-2.0/pom.xml
@@ -55,7 +55,7 @@
  <repository>
  <id>guiceyfruit.googlecode</id>
  <name>GuiceyFruit GoogleCode Maven Repository</name>
- <url>http://guiceyfruit.googlecode.com/svn/repo/releases</url>
+ <url>https://guiceyfruit.googlecode.com/svn/repo/releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/hamcrest-1.2/pom.xml b/hamcrest-1.2/pom.xml
@@ -40,7 +40,7 @@
  <repository>
  <id>guiceyfruit.release</id>
  <name>GuiceyFruit Release Repository</name>
- <url>http://guiceyfruit.googlecode.com/svn/repo/releases/</url>
+ <url>https://guiceyfruit.googlecode.com/svn/repo/releases/</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/hapi-0.5.1/pom.xml b/hapi-0.5.1/pom.xml
@@ -65,7 +65,7 @@
  <repository>
  <id>servicemix-m2-repo</id>
  <name>Servicemix Maven2 Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  </repository>
  </repositories>
 

diff --git a/hibernate-validator-4.0.2.GA/pom.xml b/hibernate-validator-4.0.2.GA/pom.xml
@@ -110,7 +110,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.com/maven2</url>
+ <url>https://repository.jboss.com/maven2</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/hibernate-validator-4.1.0.Final/pom.xml b/hibernate-validator-4.1.0.Final/pom.xml
@@ -111,7 +111,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.org/nexus/content/groups/public-jboss/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public-jboss/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/hibernate-validator-5.0.2.Final/pom.xml b/hibernate-validator-5.0.2.Final/pom.xml
@@ -120,7 +120,7 @@
  <repository>
  <id>jboss</id>
  <name>JBoss Maven Repository</name>
- <url>http://repository.jboss.org/nexus/content/groups/public-jboss/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public-jboss/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/hsqldb-1.8.0.10/pom.xml b/hsqldb-1.8.0.10/pom.xml
@@ -39,7 +39,7 @@
  <repository>
  <id>fusesource.m2all</id>
  <name>Fusesource Release Repository</name>
- <url>http://repo.fusesource.com/maven2-all</url>
+ <url>https://repo.fusesource.com/maven2-all</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/hsqldb-1.8.0.7/pom.xml b/hsqldb-1.8.0.7/pom.xml
@@ -39,7 +39,7 @@
  <repository>
  <id>fusesource.m2all</id>
  <name>Fusesource Release Repository</name>
- <url>http://repo.fusesource.com/maven2-all</url>
+ <url>https://repo.fusesource.com/maven2-all</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/isorelax-20050913/pom.xml b/isorelax-20050913/pom.xml
@@ -58,7 +58,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/jain-sip-ri-1.2.154/pom.xml b/jain-sip-ri-1.2.154/pom.xml
@@ -38,7 +38,7 @@
  <repositories>
  <repository>
  <id>jboss</id>
- <url>http://repository.jboss.org/nexus/content/groups/public/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public/</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/jain-sip-ri-1.2.166/pom.xml b/jain-sip-ri-1.2.166/pom.xml
@@ -38,7 +38,7 @@
  <repositories>
  <repository>
  <id>jboss</id>
- <url>http://repository.jboss.org/nexus/content/groups/public/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public/</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/jain-sip-ri-1.2.169/pom.xml b/jain-sip-ri-1.2.169/pom.xml
@@ -38,7 +38,7 @@
  <repositories>
  <repository>
  <id>jboss</id>
- <url>http://repository.jboss.org/nexus/content/groups/public/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public/</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/javassist-3.11.0.GA/pom.xml b/javassist-3.11.0.GA/pom.xml
@@ -51,7 +51,7 @@
  <repository>
  <id>jboss.m2</id>
  <name>JBoss Maven2 Repository</name>
- <url>http://repository.jboss.org/maven2</url>
+ <url>https://repository.jboss.org/maven2</url>
  </repository>
  </repositories>
 

diff --git a/javassist-3.12.0.GA/pom.xml b/javassist-3.12.0.GA/pom.xml
@@ -51,7 +51,7 @@
  <repository>
  <id>jboss.m2</id>
  <name>JBoss Maven2 Repository</name>
- <url>http://repository.jboss.org/maven2</url>
+ <url>https://repository.jboss.org/maven2</url>
  </repository>
  </repositories>
 

diff --git a/javassist-3.12.1.GA/pom.xml b/javassist-3.12.1.GA/pom.xml
@@ -51,7 +51,7 @@
  <repository>
  <id>jboss</id>
  <name>New JBoss Maven2 Repository</name>
- <url>http://repository.jboss.org/maven2-brew/</url>
+ <url>https://repository.jboss.org/maven2-brew/</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/javassist-3.9.0.GA/pom.xml b/javassist-3.9.0.GA/pom.xml
@@ -51,7 +51,7 @@
  <repository>
  <id>jboss.m2</id>
  <name>JBoss Maven2 Repository</name>
- <url>http://repository.jboss.org/maven2</url>
+ <url>https://repository.jboss.org/maven2</url>
  </repository>
  </repositories>
 

diff --git a/jaxb-impl-2.1.13/pom.xml b/jaxb-impl-2.1.13/pom.xml
@@ -98,7 +98,7 @@
  <repository>
  <id>maven2-repository.dev.java.net</id>
  <name>Java.net Repository for Maven</name>
- <url>http://download.java.net/maven/2/</url>
+ <url>https://download.java.net/maven/2/</url>
  <layout>default</layout>
  <releases>
  <enabled>true</enabled>

diff --git a/jaxp-ri-1.4.4/pom.xml b/jaxp-ri-1.4.4/pom.xml
@@ -90,7 +90,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/jdt-core-3.2.3/pom.xml b/jdt-core-3.2.3/pom.xml
@@ -60,7 +60,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/jibx-1.1.3/pom.xml b/jibx-1.1.3/pom.xml
@@ -57,7 +57,7 @@
  <repository>
  <id>jibx.sf.net</id>
  <name>JiBX repository</name>
- <url>http://jibx.sf.net/maven2</url>
+ <url>https://jibx.sf.net/maven2</url>
  <releases>
  <updatePolicy>never</updatePolicy>
  </releases>

diff --git a/josql-1.5/pom.xml b/josql-1.5/pom.xml
@@ -59,7 +59,7 @@
  <repository>
  <id>open.iona.m2</id>
  <name>IONA Open Source Community Release Repository</name>
- <url>http://repo.open.iona.com/maven2</url>
+ <url>https://repo.open.iona.com/maven2</url>
  <snapshots>
  <enabled>false</enabled>
  </snapshots>

diff --git a/jsendnsca-core-1.3.1/pom.xml b/jsendnsca-core-1.3.1/pom.xml
@@ -72,7 +72,7 @@
  <repository>
  <id>fusesource.m2-all</id>
  <name>Fuse Source Maven Repo</name>
- <url>http://repo.fusesource.com/maven2-all</url>
+ <url>https://repo.fusesource.com/maven2-all</url>
  </repository>
  </repositories>
 

diff --git a/jsmpp-2.0/pom.xml b/jsmpp-2.0/pom.xml
@@ -73,7 +73,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/jsmpp-2.1.0/pom.xml b/jsmpp-2.1.0/pom.xml
@@ -81,7 +81,7 @@
  <repository>
  <id>servicemix</id>
  <name>Apache ServiceMix Repository</name>
- <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+ <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/mybatis-3.0.2/pom.xml b/mybatis-3.0.2/pom.xml
@@ -55,7 +55,7 @@
  <repository>
  <id>java.net</id>
  <name>Java.net Maven Repository</name>
- <url>http://download.java.net/maven/2</url>
+ <url>https://download.java.net/maven/2</url>
  </repository>
  </repositories>
 

diff --git a/neo4j-1.8/pom.xml b/neo4j-1.8/pom.xml
@@ -77,7 +77,7 @@
  <repository>
  <id>neo4j.repo</id>
  <name>neo4j Repository</name>
- <url>http://m2.neo4j.org/content/repositories/releases</url>
+ <url>https://m2.neo4j.org/content/repositories/releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>

diff --git a/neo4j-1.9.2/pom.xml b/neo4j-1.9.2/pom.xml
@@ -78,7 +78,7 @@
  <repository>
  <id>neo4j.repo</id>
  <name>neo4j Repository</name>
- <url>http://m2.neo4j.org/content/repositories/releases</url>
+ <url>https://m2.neo4j.org/content/repositories/releases</url>
  <releases>
  <enabled>true</enabled>
  </releases>