Great response to INFRA, Dan. I am in agreement they probably should leave http open for the DTD and XSDs because that runs really deep and there is a lot of software out there that is old and probably deprecated that still expects http.
I believe the crux of this issue seems to come back to using the HttpURLConnection as it doesn’t follow 301 redirects if there is a protocol change. This apparently goes all the way back to JDK 1.3. https://bugs.java.com/bugdatabase/view_bug.do?bug_id=4620571 <https://bugs.java.com/bugdatabase/view_bug.do?bug_id=4620571> So it was done by design to not allow protocol changes for redirect follows. The long term fix is probably to not use HttpURLConnection (or code that calls it) and instead write a utility that can allow a protocol redirect that allows http to https. Just my .02 and thoughts. Jeff > On Dec 8, 2021, at 9:29 AM, Daniel Kulp <[email protected]> wrote: > > > We aren’t the only ones getting hit by it. Struts has the same issue: > > https://issues.apache.org/jira/browse/INFRA-22590 > <https://issues.apache.org/jira/browse/INFRA-22590> > > I’ve commented on that issue to mention CXF is also affected. We’ll see if > there is any response from INFRA. > > Dan > > > >> On Dec 7, 2021, at 10:09 PM, Andrey Redko <[email protected]> wrote: >> >> Hey guys, >> >> Here we are [1], the redirection change took place on December 1st, which >> coincide with the time the schema issues started to surface. I think he >> change is irreversible, what are our options? Could we configure parsers to >> work with redirect? Update schemas to use https instead? What do you think >> guys? >> >> >> [1] https://issues.apache.org/jira/browse/INFRA-22567 >> >> Best Regards, >> Andriy Redko >> >> On Tue, Dec 7, 2021, 7:53 PM Jeff Genender <[email protected]> wrote: >> >>> This is a big issue... >>> >>> Anyone running SMX 7.0.1 is not able to fire up their server as that >>> appears to be related to camel-cxf 2.16.5 based on an old aries version. >>> >>> It seems any 301 redirect with a protocol change (http to https) may be >>> the issue. Rumor has is aries 1.6.2+ fixes this but I have not confirmed. >>> >>> Jeff >>> >>> >>> >>>> On Dec 6, 2021, at 3:06 PM, Freeman Fang <[email protected]> wrote: >>>> >>>> Hi Team, >>>> >>>> We have several jira tickets about can't load cxf xsd files through http >>>> over the weekend >>>> >>>> https://issues.apache.org/jira/browse/CXF-8622 >>>> https://issues.apache.org/jira/browse/CXF-8623 >>>> https://issues.apache.org/jira/browse/SM-4967 >>>> >>>> Guess this is caused by Apache/CXF website restructuring, but I don't >>> know >>>> the detailed story behind this or if this is temporary|permanent. Does >>>> anyone know what's going on under the hood? >>>> >>>> Thanks and Best Regards >>>> Freeman >>> >>> > > -- > Daniel Kulp > [email protected] <mailto:[email protected]> - http://dankulp.com/blog > <http://dankulp.com/blog> > Talend - http://talend.com <http://coders.talend.com/>
