[PDFBOX-3022] Maven repos should be https

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.8.10, 1.8.11, 2.0.0
• Fix Version/s: 1.8.11, 2.0.0
• Assignee: Tilman Hausherr
• Reporter: Java Developer
• Created: 13/Oct/15 16:28
• Updated: 17/Nov/16 19:17
• Resolved: 15/Oct/15 17:17

Description

I noticed there are 2 http Maven repos. Only https should be used for security reasons. See http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/

This one you can simply change from http to https:
./parent/pom.xml: <url>http://jbig2-imageio.googlecode.com/svn/maven-repository/</url>

This one there isn't an https version available:
./parent/pom.xml: <url>http://www.mygrid.org.uk/maven/repository</ur

What library did the mygrid repo have to be added for? The myGrid Maven repository was mainly used for development of Taverna, which has since moved to the Apache Software Foundation, and uses https://repository.apache.org/ and mirrors to Maven Central. Other software they publish has been gradually moved to https://bintray.com/ which should also offer secure connections.

Issue Links

• is related to: PDFBOX-3577 remove mygrid repository in 1.8