[JIRA] (JMVN-42) Enforcer needs to learn about classifiers for the distribution signature check

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *created* an issue

Maven Enforcer ( https://shibboleth.atlassian.net/browse/JMVN?atlOrigin=eyJpIjoiZjkzNjVjMDNiMDk0NDk5M2FiNzMzNjMxNWY0YTk1ZDEiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JMVN-42?atlOrigin=eyJpIjoiZjkzNjVjMDNiMDk0NDk5M2FiNzMzNjMxNWY0YTk1ZDEiLCJwIjoiaiJ9 ) JMVN-42 ( https://shibboleth.atlassian.net/browse/JMVN-42?atlOrigin=eyJpIjoiZjkzNjVjMDNiMDk0NDk5M2FiNzMzNjMxNWY0YTk1ZDEiLCJwIjoiaiJ9 ) Enforcer needs to learn about classifiers for the distribution signature check ( https://shibboleth.atlassian.net/browse/JMVN-42?atlOrigin=eyJpIjoiZjkzNjVjMDNiMDk0NDk5M2FiNzMzNjMxNWY0YTk1ZDEiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.1.1 Assignee: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) Created: 08/Oct/22 10:39 AM Fix Versions: 3.1.1 Priority: Trivial Reporter: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 )

when we are scanning the distribution to check that it is signed we have to infer a the pom coordinates from just the name. This is easy for things defined in our jar files bit not for dependencies.

So we have added “What is then maven group for this base name” (in artifactMap.properties in the data aertifact) and <versionExtensions> (in the pom), this latter dealing with peoiple who like to have versions like 9999.0-empty-to-avoid-conflict-with-guava (yes this is a version).

Enter netty which uses classifiers. The M2 checker handles classifiers (because it has the pom), but we have no way of distinguising something called listenablefuture-9999.0-empty-to-avoid-conflict-with-guava (funky version) from netty-transport-native-epoll-4.1.75.Final-linux-x86_64 (normal-ish version, funky classifier). This means we cannot find the pom coordinates for these jars.

We need to fix them. I view this is a bug so I’m going to target 3.1.1

( https://shibboleth.atlassian.net/browse/JMVN-42#add-comment?atlOrigin=eyJpIjoiZjkzNjVjMDNiMDk0NDk5M2FiNzMzNjMxNWY0YTk1ZDEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JMVN-42#add-comment?atlOrigin=eyJpIjoiZjkzNjVjMDNiMDk0NDk5M2FiNzMzNjMxNWY0YTk1ZDEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100207- sha1:591c2ef )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221008/8b089462/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-736e3971-6b01-4ee5-9935-fed65632bf80
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221008/8b089462/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-8feec307-4dac-4130-8ea3-5779ed2cdb14
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221008/8b089462/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-9b4dd09c-de5f-41ee-a426-41dc01acbde4
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221008/8b089462/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-37f624ec-6dab-4152-b74c-67a5ceb22da6
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221008/8b089462/attachment-0007.png>