Uploaded image for project: 'KIE Cloud'
  1. KIE Cloud
  2. KIECLOUD-187

Maven repositories must made https calls instead http.

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Major
    • 6.4.12.GA
    • 6.4.11.GA-1
    • RHDS, RHIPS
    • None

    Description

      Red Hat was recently made aware that in certain Java repositories, we pull and build dependencies over HTTP instead of HTTPS. We recognize that using HTTP when HTTPS is available is less than desirable and are investigating the report. Importantly, using HTTP alone is not sufficient to effect an attack; an attacker needs to be in a position to perform a man-in-the-middle attack in the first place. The security of builds is important to Red Hat, so we will be taking steps to harden the process by changing calls to use HTTPS where possible.

      Used only by our 6.4 RHDS and RHIPS images:

      Attachments

        Issue Links

          Activity

            People

              rhn-support-zanini Ricardo Zanini Fernandes
              rhn-support-fspolti Filippe Spolti
              Jakub Schwan Jakub Schwan
              Jakub Schwan Jakub Schwan
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: