[BIGTOP-3037] Download maven securely

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.1
• Fix Version/s: 1.3.0
• Component/s: toolchain
• Assignee: Olaf Flebbe
• Reporter: Olaf Flebbe
• Created: 31/May/18 12:42
• Updated: 06/Jun/18 20:26
• Resolved: 06/Jun/18 20:26

Description

There is now way to verify authenticity of maven download from the apache mirrors.

But maven is available from maven central as well

Maven central has the advantage being immutable. There is no need for looking for newest versions.