[Updated] (MNG-5689) Checksum policy for mirrors

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Updated] (MNG-5689) Checksum policy for mirrors

Petr Bodnar (Jira)

     [ https://issues.apache.org/jira/browse/MNG-5689?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Osipov updated MNG-5689:
    Fix Version/s: Issues to be reviewed for 4.x

> Checksum policy for mirrors
> ---------------------------
>                 Key: MNG-5689
>                 URL: https://issues.apache.org/jira/browse/MNG-5689
>             Project: Maven
>          Issue Type: Improvement
>          Components: Settings
>    Affects Versions: 3.2.3
>            Reporter: Christopher Tubbs
>            Priority: Major
>              Labels: security-issue
>             Fix For: Issues to be reviewed for 4.x
> It does not appear that there is any way to configure a checksum policy for mirrors in the settings.xml file.
> In particular, I'd love to enforce a "strict" checksum policy on maven central. I can configure a mirrorOf central, but I cannot set the checksum policy. This seems like a big oversight.

This message was sent by Atlassian Jira