Archiva
  1. Archiva
  2. MRM-212

configure checksum policy for proxied repository

    Details

    • Type: Improvement Improvement
    • Status: Closed Closed
    • Priority: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.0-alpha-1
    • Component/s: remote proxy
    • Labels:
      None
    • Number of attachments :
      2

      Description

      Some artifact on repo1.maven.org have bad checksum. This need fix, but this also make archiva not usable as a replacement for maven-proxy.

      As maven itself allow to configure a checksum policy, a new configuration parameter on proxied repo would be nice.

      1. 2006-10-26-checksum-policy.patch
        8 kB
        Raphaël Piéroni
      2. MRM-212.patch
        7 kB
        Arnaud Heritier

        Issue Links

          Activity

          Hide
          Wendy Smoak added a comment -

          Archiva definitely needs this feature. Right now, it will not proxy the latest release of maven-gpg-plugin due to a bad checksum.

          We need to fix the bad checksums in central and make it stop happening-- is it the deploy plugin causing the problem?

          [ERROR] BUILD ERROR
          [INFO] ------------------------------------------------------------------------
          [INFO] Failed to resolve artifact.

          GroupId: org.apache.maven.plugins
          ArtifactId: maven-gpg-plugin
          Version: 1.0-alpha-3

          Reason: Unable to download the artifact from any repository

          org.apache.maven.plugins:maven-gpg-plugin:pom:1.0-alpha-3

          from the specified remote repositories:
          central (http://localhost:8080/archiva/repository/releases),
          ...

          From the log file:

          INFO | jvm 1 | 2007/03/10 10:23:52 | 2007-03-10 10:23:52,526 [SocketListener0-2] WARN ProxyRequestHandler - The checksum 'e4525958537d3b438ede7acb73bd10ba' did not match the remote value: D41D8CD98F00B204E9800998ECF8427E
          INFO | jvm 1 | 2007/03/10 10:23:52 | 2007-03-10 10:23:52,526 [SocketListener0-2] WARN ProxyRequestHandler - Skipping repository Central Repository: Checksum failures occurred while downloading org/apache/maven/plugins/maven-gpg-plugin/1.0-alpha-3/maven-gpg-plugin-1.0-alpha-3.pom

          Show
          Wendy Smoak added a comment - Archiva definitely needs this feature. Right now, it will not proxy the latest release of maven-gpg-plugin due to a bad checksum. We need to fix the bad checksums in central and make it stop happening-- is it the deploy plugin causing the problem? [ERROR] BUILD ERROR [INFO] ------------------------------------------------------------------------ [INFO] Failed to resolve artifact. GroupId: org.apache.maven.plugins ArtifactId: maven-gpg-plugin Version: 1.0-alpha-3 Reason: Unable to download the artifact from any repository org.apache.maven.plugins:maven-gpg-plugin:pom:1.0-alpha-3 from the specified remote repositories: central ( http://localhost:8080/archiva/repository/releases ), ... From the log file: INFO | jvm 1 | 2007/03/10 10:23:52 | 2007-03-10 10:23:52,526 [SocketListener0-2] WARN ProxyRequestHandler - The checksum 'e4525958537d3b438ede7acb73bd10ba' did not match the remote value: D41D8CD98F00B204E9800998ECF8427E INFO | jvm 1 | 2007/03/10 10:23:52 | 2007-03-10 10:23:52,526 [SocketListener0-2] WARN ProxyRequestHandler - Skipping repository Central Repository: Checksum failures occurred while downloading org/apache/maven/plugins/maven-gpg-plugin/1.0-alpha-3/maven-gpg-plugin-1.0-alpha-3.pom
          Hide
          Arnaud Heritier added a comment -

          With the recent refactoring, we have xcertainly to review our patch. I'll try to do it in some days because I want to update my archiva release and I need this , I'll commit it directly to be sure that we'll not loose it.

          Show
          Arnaud Heritier added a comment - With the recent refactoring, we have xcertainly to review our patch. I'll try to do it in some days because I want to update my archiva release and I need this , I'll commit it directly to be sure that we'll not loose it.
          Hide
          Arnaud Heritier added a comment -

          applied in 0.9 branch

          Show
          Arnaud Heritier added a comment - applied in 0.9 branch
          Hide
          Joakim Erdfelt added a comment -

          Archiva trunk has a post-download policy for checksums.

          Possible values for this policy.

          • FAIL - if a bad checksum is downloaded, consider the downloaded file to be bad, fail the attempt.
          • FIX - if a bad checksum is downloaded, report it, and fix it, returning the fixed checksum to the client.
          • IGNORE - do not check the checksum.
          Show
          Joakim Erdfelt added a comment - Archiva trunk has a post-download policy for checksums. Possible values for this policy. FAIL - if a bad checksum is downloaded, consider the downloaded file to be bad, fail the attempt. FIX - if a bad checksum is downloaded, report it, and fix it, returning the fixed checksum to the client. IGNORE - do not check the checksum.
          Hide
          Joakim Erdfelt added a comment -

          This improvement has been made on archiva trunk.

          Show
          Joakim Erdfelt added a comment - This improvement has been made on archiva trunk.

            People

            • Assignee:
              Joakim Erdfelt
              Reporter:
              nicolas de loof
            • Votes:
              8 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: