[JIRA] (MDA-264) Add the JarEnforcer to the CLI Distributiin build

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *created* an issue

Metadata Aggregator ( https://shibboleth.atlassian.net/browse/MDA?atlOrigin=eyJpIjoiMDYxZmRjNjkxNjc5NGEyY2JlMGRhODE0OThmZTc4NTMiLCJwIjoiaiJ9 ) / Task ( https://shibboleth.atlassian.net/browse/MDA-264?atlOrigin=eyJpIjoiMDYxZmRjNjkxNjc5NGEyY2JlMGRhODE0OThmZTc4NTMiLCJwIjoiaiJ9 ) MDA-264 ( https://shibboleth.atlassian.net/browse/MDA-264?atlOrigin=eyJpIjoiMDYxZmRjNjkxNjc5NGEyY2JlMGRhODE0OThmZTc4NTMiLCJwIjoiaiJ9 ) Add the JarEnforcer to the CLI Distributiin build ( https://shibboleth.atlassian.net/browse/MDA-264?atlOrigin=eyJpIjoiMDYxZmRjNjkxNjc5NGEyY2JlMGRhODE0OThmZTc4NTMiLCJwIjoiaiJ9 )

Issue Type: Task Affects Versions: 0.9.2 Assignee: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) Components: Build & Distribution Created: 29/Sep/21 5:34 AM Priority: Medium Reporter: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 )

I'm opening this case separate from JPAR-182 ( https://shibboleth.atlassian.net/browse/JPAR-182 ) Open since we cannot progress it ATM.

I'll do the work, but once the part of the build that creates the zip/tgz distribution is stable we should add a call to the MavenEnforcer/JarEnforcer to ensure that all depedency jars in the distro are correctly signed. Potentially we can also add the dependency checking that the IdP uses to ensure that the versions of the dependencies are what we expect (multiple parent poms often mean that maven is effectively non-deterministic in which version of a jar you get).

Hint: This work is a lot easier if the dependency analysis is done in a maven stage prior to the assembly - so all the assembly does is pull together the jars into the zip/tgz. (If the dependency jars are in a local directory rather than only the tgz/zip one can point the jar enforce directly at that directory - rather than unpack the disto first)

( https://shibboleth.atlassian.net/browse/MDA-264#add-comment?atlOrigin=eyJpIjoiMDYxZmRjNjkxNjc5NGEyY2JlMGRhODE0OThmZTc4NTMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/MDA-264#add-comment?atlOrigin=eyJpIjoiMDYxZmRjNjkxNjc5NGEyY2JlMGRhODE0OThmZTc4NTMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100178- sha1:3031cab )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20210929/bea6dc9a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-e5606e6d-5161-45b2-9aa7-5b031a42cc38
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210929/bea6dc9a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-medium-6af6a29d-bf51-4c29-b45d-a2bf6c045b71
Type: image/png
Size: 159 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210929/bea6dc9a/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-6a1b18e7-b74d-4c2e-8ea9-599cf8be4565
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210929/bea6dc9a/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-307246c4-6cb8-478a-8db6-b45b9566e1e6
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210929/bea6dc9a/attachment-0007.png>