rpms/maven-resolver
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Remove use of deprecated SHA-1 and MD5 algorithms

Browse Source
This commit is contained in:
Mikolaj Izdebski 2021-10-28 10:05:39 +02:00
parent 0e27f7ce32
commit b9c17c77dd
2 changed files with 46 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
0001-Remove-use-of-deprecated-SHA-1-and-MD5-algorithms.patch Normal file
View File

@ -0,0 +1,37 @@
From 8f7d5c7c763f66035dda86012d58744547672abe Mon Sep 17 00:00:00 2001
From: Mikolaj Izdebski <mizdebsk@redhat.com>
Date: Thu, 28 Oct 2021 10:03:13 +0200
Subject: [PATCH] Remove use of deprecated SHA-1 and MD5 algorithms
---
.../aether/repository/AuthenticationDigest.java | 11 ++---------
1 file changed, 2 insertions(+), 9 deletions(-)
diff --git a/maven-resolver-api/src/main/java/org/eclipse/aether/repository/AuthenticationDigest.java b/maven-resolver-api/src/main/java/org/eclipse/aether/repository/AuthenticationDigest.java
index 27b88c02..6236e7b2 100644
--- a/maven-resolver-api/src/main/java/org/eclipse/aether/repository/AuthenticationDigest.java
+++ b/maven-resolver-api/src/main/java/org/eclipse/aether/repository/AuthenticationDigest.java
@@ -98,18 +98,11 @@ public final class AuthenticationDigest
{
try
{
- return MessageDigest.getInstance( "SHA-1" );
+ return MessageDigest.getInstance( "SHA-256" );
}
catch ( NoSuchAlgorithmException e )
{
- try
- {
- return MessageDigest.getInstance( "MD5" );
- }
- catch ( NoSuchAlgorithmException ne )
- {
- throw new IllegalStateException( ne );
- }
+ throw new IllegalStateException( e );
}
}
--
2.32.0

11
maven-resolver.spec
View File

@ -9,13 +9,16 @@
Name: maven-resolver
Epoch: 1
Version: 1.6.1
Release: 6%{?dist}
Release: 7%{?dist}
License: ASL 2.0
Summary: Apache Maven Artifact Resolver library
URL: https://maven.apache.org/resolver/
Source0: https://archive.apache.org/dist/maven/resolver/%{name}-%{version}-source-release.zip
BuildArch: noarch
Source0: https://archive.apache.org/dist/maven/resolver/%{name}-%{version}-source-release.zip
Patch0: 0001-Remove-use-of-deprecated-SHA-1-and-MD5-algorithms.patch
BuildRequires: maven-local-openjdk8
%if %{with bootstrap}
BuildRequires: javapackages-bootstrap
@ -76,6 +79,7 @@ artifact transports and artifact resolution.
%prep
%setup -q
%patch0 -p1
# requires internet connection
rm maven-resolver-transport-http/src/test/java/org/eclipse/aether/transport/http/HttpTransporterTest.java
@ -130,6 +134,9 @@ done
%license LICENSE NOTICE
%changelog
* Thu Oct 28 2021 Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.6.1-7
- Remove use of deprecated SHA-1 and MD5 algorithms
* Sun Oct 03 2021 Didik Supriadi <didiksupriadi41@fedoraproject.org> - 1:1.6.1-6
- Enable transport-file and transport-http module