From db2ca8838a5635d3b423420dbe943b79249b0a8f Mon Sep 17 00:00:00 2001
From: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Date: Tue, 11 Feb 2020 11:40:16 -0500
Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
---
 features/pom.xml                                   |  6 +++---
 .../pom.xml                                        |  4 ++--
 .../pom.xml                                        |  4 ++--
 .../pom.xml                                        |  4 ++--
 .../pom.xml                                        |  4 ++--
 pom.xml                                            | 14 +++++++-------
 6 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/features/pom.xml b/features/pom.xml
index 71367411b..b7fe60818 100755
--- a/features/pom.xml
+++ b/features/pom.xml
@@ -40,17 +40,17 @@
         <repository>
             <id>wso2-maven2-repo</id>
             <name>WSO2 Maven2 Repo</name>
-            <url>http://dist.wso2.org/maven2/</url>
+            <url>https://dist.wso2.org/maven2/</url>
         </repository>
     </repositories>
     <pluginRepositories>
         <pluginRepository>
             <id>wso2-maven2-repository</id>
-            <url>http://dist.wso2.org/maven2</url>
+            <url>https://dist.wso2.org/maven2</url>
         </pluginRepository>
         <pluginRepository>
             <id>wso2-maven2-snapshot-repository</id>
-            <url>http://dist.wso2.org/snapshots/maven2</url>
+            <url>https://dist.wso2.org/snapshots/maven2</url>
         </pluginRepository>
     </pluginRepositories>
     <profiles>
diff --git a/plugins/org.wso2.developerstudio.eclipse.kernel.libraries/pom.xml b/plugins/org.wso2.developerstudio.eclipse.kernel.libraries/pom.xml
index a725adc2c..257e1aba3 100644
--- a/plugins/org.wso2.developerstudio.eclipse.kernel.libraries/pom.xml
+++ b/plugins/org.wso2.developerstudio.eclipse.kernel.libraries/pom.xml
@@ -79,7 +79,7 @@
         <repository>
             <id>maven-central</id>
             <name>Maven central repository</name>
-            <url>http://repo1.maven.org/maven2/</url>
+            <url>https://repo1.maven.org/maven2/</url>
         </repository>
         <repository>
             <releases>
@@ -89,7 +89,7 @@
             </releases>
             <id>wso2-nexus</id>
             <name>WSO2 internal Repository</name>
-            <url>http://maven.wso2.org/nexus/content/groups/wso2-public/</url>
+            <url>https://maven.wso2.org/nexus/content/groups/wso2-public/</url>
         </repository>
     </repositories>
     <build>
diff --git a/plugins/org.wso2.developerstudio.eclipse.platform.core/pom.xml b/plugins/org.wso2.developerstudio.eclipse.platform.core/pom.xml
index ffe2fb71b..c70363c21 100644
--- a/plugins/org.wso2.developerstudio.eclipse.platform.core/pom.xml
+++ b/plugins/org.wso2.developerstudio.eclipse.platform.core/pom.xml
@@ -45,7 +45,7 @@
         <repository>
             <id>maven-central</id>
             <name>Maven central repository</name>
-            <url>http://repo1.maven.org/maven2/</url>
+            <url>https://repo1.maven.org/maven2/</url>
         </repository>
         <repository>
             <releases>
@@ -55,7 +55,7 @@
             </releases>
             <id>wso2-nexus</id>
             <name>WSO2 internal Repository</name>
-            <url>http://maven.wso2.org/nexus/content/groups/wso2-public/</url>
+            <url>https://maven.wso2.org/nexus/content/groups/wso2-public/</url>
         </repository>
     </repositories>
     <build>
diff --git a/plugins/org.wso2.developerstudio.eclipse.platform.ui/pom.xml b/plugins/org.wso2.developerstudio.eclipse.platform.ui/pom.xml
index c39d99312..2cccfe390 100644
--- a/plugins/org.wso2.developerstudio.eclipse.platform.ui/pom.xml
+++ b/plugins/org.wso2.developerstudio.eclipse.platform.ui/pom.xml
@@ -49,7 +49,7 @@
         <repository>
             <id>maven-central</id>
             <name>Maven central repository</name>
-            <url>http://repo1.maven.org/maven2/</url>
+            <url>https://repo1.maven.org/maven2/</url>
         </repository>
         <repository>
             <releases>
@@ -59,7 +59,7 @@
             </releases>
             <id>wso2-nexus</id>
             <name>WSO2 internal Repository</name>
-            <url>http://maven.wso2.org/nexus/content/groups/wso2-public/</url>
+            <url>https://maven.wso2.org/nexus/content/groups/wso2-public/</url>
         </repository>
     </repositories>
     <build>
diff --git a/plugins/org.wso2.developerstudio.eclipse.wso2plugin.template.manager/pom.xml b/plugins/org.wso2.developerstudio.eclipse.wso2plugin.template.manager/pom.xml
index f85b39273..a5f637509 100644
--- a/plugins/org.wso2.developerstudio.eclipse.wso2plugin.template.manager/pom.xml
+++ b/plugins/org.wso2.developerstudio.eclipse.wso2plugin.template.manager/pom.xml
@@ -36,7 +36,7 @@
 		<repository>
 			<id>maven-central</id>
 			<name>Maven central repository</name>
-			<url>http://repo1.maven.org/maven2/</url>
+			<url>https://repo1.maven.org/maven2/</url>
 		</repository>
 		<repository>
 			<releases>
@@ -46,7 +46,7 @@
 			</releases>
 			<id>wso2-nexus</id>
 			<name>WSO2 internal Repository</name>
-			<url>http://maven.wso2.org/nexus/content/groups/wso2-public/</url>
+			<url>https://maven.wso2.org/nexus/content/groups/wso2-public/</url>
 		</repository>
 	</repositories>
 	<build>
diff --git a/pom.xml b/pom.xml
index c8d0e72fd..fcabe54ef 100755
--- a/pom.xml
+++ b/pom.xml
@@ -30,7 +30,7 @@
 		<repository>
 			<id>nexus-releases</id>
 			<name>WSO2 Release Distribution Repository</name>
-			<url>http://maven.wso2.org/nexus/service/local/staging/deploy/maven2/</url>
+			<url>https://maven.wso2.org/nexus/service/local/staging/deploy/maven2/</url>
 		</repository>
 	</distributionManagement>
 	<properties>
@@ -48,7 +48,7 @@
 				<checksumPolicy>ignore</checksumPolicy>
 			</releases>
 			<id>Eclipse-p2-repo</id>
-			<url>http://download.eclipse.org/releases/oxygen/</url>
+			<url>https://download.eclipse.org/releases/oxygen/</url>
 			<layout>p2</layout>
 		</repository>
 		<repository>
@@ -58,7 +58,7 @@
 				<checksumPolicy>ignore</checksumPolicy>
 			</releases>
 			<id>WSO2-Nexus-Maven-Repository</id>
-			<url>http://maven.wso2.org/nexus/content/groups/wso2-public/</url>
+			<url>https://maven.wso2.org/nexus/content/groups/wso2-public/</url>
 			<layout>default</layout>
 		</repository>
 		<repository>
@@ -68,7 +68,7 @@
 				<checksumPolicy>ignore</checksumPolicy>
 			</snapshots>
 			<id>WSO2-Nexus-Maven-SNAPSHOT-Repository</id>
-			<url>http://maven.wso2.org/nexus/content/repositories/wso2.maven2.snapshot/</url>
+			<url>https://maven.wso2.org/nexus/content/repositories/wso2.maven2.snapshot/</url>
 			<layout>default</layout>
 		</repository>
 	</repositories>
@@ -76,18 +76,18 @@
 		<pluginRepository>
 			<id>repository.dev.java.net-maven2</id>
 			<name>Java.net Repository for Maven</name>
-			<url>http://download.java.net/maven/2/</url>
+			<url>https://download.java.net/maven/2/</url>
 			<layout>default</layout>
 		</pluginRepository>
 		<pluginRepository>
 			<id>repository.org.eclipse.bpel</id>
 			<name>eclipse bpel Repository for Maven</name>
-			<url>http://download.eclipse.org/bpel/site/</url>
+			<url>https://download.eclipse.org/bpel/site/</url>
 			<layout>default</layout>
 		</pluginRepository>
 		<pluginRepository>
 			<id>wso2-maven2-repository</id>
-			<url>http://dist.wso2.org/maven2</url>
+			<url>https://dist.wso2.org/maven2</url>
 		</pluginRepository>
 	</pluginRepositories>
 	<build>