[java-idp-plugin-jetty] 185/186: JJETTY-13 Implement Jetty-base plugin V2

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch dev/foo
in repository java-idp-plugin-jetty.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-jetty.git;a=commit;h=e93b0fa8597a9733b0b3069ad790c34a679e7896

commit e93b0fa8597a9733b0b3069ad790c34a679e7896
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Thu Jul 24 15:52:11 2025 +0100

    JJETTY-13 Implement Jetty-base plugin V2
    
    https://shibboleth.atlassian.net/browse/JJETTY-13
    
    Add a warning about the folly of downloading without a signature check
---
 .../net/shibboleth/idp/plugin/jetty/cli/impl/JettyDownloadCLI.java    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/jetty-cli/src/main/java/net/shibboleth/idp/plugin/jetty/cli/impl/JettyDownloadCLI.java b/jetty-cli/src/main/java/net/shibboleth/idp/plugin/jetty/cli/impl/JettyDownloadCLI.java
index d6f4e57..49ed398 100644
--- a/jetty-cli/src/main/java/net/shibboleth/idp/plugin/jetty/cli/impl/JettyDownloadCLI.java
+++ b/jetty-cli/src/main/java/net/shibboleth/idp/plugin/jetty/cli/impl/JettyDownloadCLI.java
@@ -110,6 +110,10 @@ public class JettyDownloadCLI extends AbstractIdPHomeAwareCommandLine<JettyDownl
             Security.addProvider(new BouncyCastleProvider());
         }
 
+        if (args.isNoSigCheck()) {
+            getLogger().warn("Downloading without signture checkin opens your organization to supply chain attacks");
+        }
+
         if (args.getBaseURL() == null) {
             //
             // Calculate the address

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.