[MASSEMBLY-873] Maven-Assembly-Plugin freezes when building jar-with-dependencies of project depending on org.bouncycastle:bcprov-jdk15on:1.58

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.0
• Fix Version/s: 3.1.1
• Environment: Maven 3.5.2, Java 8u151 (32-bit) as well as 9.0 (64-bit), Windows 10
• Assignee: Enrico Olivelli
• Reporter: Michael Schierl
• Created: 21/Dec/17 14:22
• Updated: 23/Dec/20 09:01
• Resolved: 27/Dec/18 16:06

Description

To reproduce:

1. Create a new directory
2. Add attached pom.xml (no other sources required to reproduce; in real world you would add some source that uses BouncyCastle lib, too).
3. Run mvn package

Actual result:

Maven hangs after

[INFO] Building jar: C:\Daten\Eigenes\svn\iota\hang\target\bug-1.0-SNAPSHOT-jar-with-dependencies.jar

, consuming one CPU core.

Expected result:

Maven builds a package containing no own source and the dependency (bouncycastle)

Workaround:

In maven local repository, edit the .jar file of BouncyCastle and remove the `META-INF\BC*` files. Then the package can be built again. So it seems to be caused somehow by verifying signed jar files.

Issue Links

• depends upon: MASSEMBLY-900 Upgrade plexus-archiver to 4.0.0
• duplicates: MASSEMBLY-875 Maven Assembly Plugin 3.X is about 10x slower than 2.6