New upstream version fixes CVE-2014-3604

2014-09-09 Thread Matthew Vernon
Hi, Upstream have released 0.3.15, which fixes this bug. I’m still away (and will be for a while yet); would one of the java team mind uploading 0.3.15, please? Hopefully it’ll just drop in on top of the existing packaging… Thanks, Matthew -- To UNSUBSCRIBE, email to debian-java-requ...@lists

Java Bof at Debconf

2014-08-20 Thread Matthew Vernon
Hi, Keen readers of the Debconf programme will notice that there's a java packaging Bof on Monday morning. I wrote some text when I submitted the suggestion, but I don't think we need feel overly constrained by it. As well as dependency/maven fun and games (per blurb), it would seem sensible to h

Re: RFS: libxmltooling-java

2014-08-19 Thread Matthew Vernon
Stephen Nelson writes: > I am looking for a sponsor for the package "libxmltooling-java" > > It builds those binary packages: > > - libxmltooling-java - XMLTooling-J > - libxmltooling-java-doc - Documentation for XMLTooling-J > > The upload is to fix an RC bug #752963 where the package FTBFS

Re: RFS: libxmltooling-java

2014-07-30 Thread Matthew Vernon
Hi, Firstly, thanks for fixing this bug; I obviously missed it arriving somehow. On 30/07/14 21:21, Stephen Nelson wrote: On Wed, Jul 30, 2014 at 6:13 PM, Sylvestre Ledru wrote: On 30/07/2014 19:04, Stephen Nelson wrote: Usually, it is better to send the patch in the bug itself and if there

Re: How to start if upstream source contains pom.xml

2014-07-21 Thread Matthew Vernon
Thorsten Glaser writes: > On Fri, 18 Jul 2014, Andreas Tille wrote: > > > Reason: POM 'org.richfaces:richfaces-bom' not found in repository: System > > is offline. > > > > org.richfaces:richfaces-bom:pom:debian > > I think you reached the point of yak-shaving: where you > have to package th

Debconf Java bof?

2014-07-04 Thread Matthew Vernon
Hi, Is there likely to be any interest in a javay bof at Debconf? I see the GSOC project looking at recursive auto-building of maven-packaged software, and I think that maven has perhaps made it harder to get larger java packages into Debian: there's a whole infrastructure of "download dependenci

Re: [GSoC] Status Reoprt: Java Project Dependency Builder

2014-06-10 Thread Matthew Vernon
Daniel Pocock writes: > On 09/06/14 12:54, Matthew Vernon wrote: > > Would there be value in checking of dependencies that are already > > packages in Debian, and/or aiming to include more of the > > more-commonly-used java libs in the distribution? > > > If Debia

Re: [GSoC] Status Reoprt: Java Project Dependency Builder

2014-06-09 Thread Matthew Vernon
Daniel Pocock writes: > On 07/06/14 09:33, Andrew Schurman wrote: > > I recall reading that packaging a maven project for debian requires > > maven to be in offline mode during the build. I can try to emulate > > that by dumping artifacts into a built artifact repository and use > > that as the o

Re: [libshib-common-java] 02/06: Initial debianisation

2014-04-14 Thread Matthew Vernon
Hi, On 14/04/14 16:44, Emmanuel Bourg wrote: > Le 14/04/2014 15:51, Matthew Vernon a écrit : > >> --- /dev/null >> +++ b/debian/source/patch-header >> @@ -0,0 +1,10 @@ >> +Subject: Collected Debian patches for libshib-common-java >> +Author: Matthew Vern

Re: RFC - more slightly shonky java packages

2014-04-11 Thread Matthew Vernon
Matthew Vernon writes: > I've uploaded libowasp-antisamy-java and libowasp-esapi-java to > experimental, including their relevant -doc packages. Unless someone > tells me I shouldn't, I'll create git repos for them under pkg-java at > some point in the vaguely-near

Re: not-yet-commons-ssl_0.3.9-4_amd64.changes is NEW

2014-03-20 Thread Matthew Vernon
Hi, Emmanuel Bourg writes: > > binary:libnot-yet-commons-ssl-java is NEW. > > binary:libnot-yet-commons-ssl-java-doc is NEW. > > source:not-yet-commons-ssl is NEW. > > Thank you for packaging this library. Don't forget to commit the source > on alioth please. There is a setup script on alioth i

Re: RFC - more slightly shonky java packages

2014-03-12 Thread Matthew Vernon
Hi, Markus Koschany writes: > If you really intend to maintain all of them for the foreseeable future, > I would start with > > libnot-yet-commons-ssl-java > libowasp-antisamy-java > libowasp-esapi-java > libvt-ldap-java > > and prepare them for experimental not unstable. However libraries sho

Re: Svnkit packaging

2014-03-03 Thread Matthew Vernon
Miguel Landaeta writes: > On Mon, Mar 3, 2014 at 11:27 AM, Matthew Vernon wrote: > > Has anyone made any progress on this? I'd rather not have another large > > java package to try and build added onto my TODO list, but it looks like > > there's no way I can p

Svnkit packaging

2014-03-03 Thread Matthew Vernon
Hi, I was looking at libsvnkit-java, as I have something that depends upon it, so I need maven artifacts in libsvnkit-java so that my maven-based project will build (I assume there's no handy work-around for this?). I couldn't get it to build, which led me to bug #735763, which has a note from ton

Re: Problem with handling of dependencies in POMs

2014-02-28 Thread Matthew Vernon
Emmanuel Bourg writes: > Le 28/02/2014 13:18, Matthew Vernon a ecrit : > > > This was all correct. However, ant-contrib's POM depends on version > > "debian" of commons-httpclient, which is wrong. > > Well spotted. Can you file a bug for the ant package

Re: Problem with handling of dependencies in POMs

2014-02-28 Thread Matthew Vernon
Hi again, > Executive summary: mh_make should be trying to find > commons-httpclient:commons-httpclient:jar:3.x, but is actually failing > to find commons-httpclient:commons-httpclient:jar:debian This was a bore to track down, but I got there. The answer is two-fold: i) maven lies about its depe

Re: Packaging Archiva

2014-02-25 Thread Matthew Vernon
Andrew Otto writes: > uh huh. :p Here is a WIP list of dependencies that are not already packaged > for debian: > https://gist.github.com/ottomata/9006927#file-archiva-dependencies-no-deb-packages Some of these are available in Debian, though you have to look a bit. For example, there are seve

RFC - more slightly shonky java packages

2014-02-20 Thread Matthew Vernon
Hi, I'm still working on the dependencies for the Shibboleth IdP. I'm not there yet (see recent emails about problems with maven), as I can't persuade mh_make to work on libshib-common-java, but I have built a number of packages, all of which are availble for now from http://www.chiark.greenend.o

Problem with handling of dependencies in POMs

2014-02-20 Thread Matthew Vernon
Hi, Sorry, I'm still trying to build java packages for Debian! mh_make is failing because it's mangling a dependency specified in the POM of a package that the thing I'm trying to build is depending on (if you see what I mean!). Executive summary: mh_make should be trying to find commons-httpclie

Bugs in ant-contrib's POM?

2014-02-20 Thread Matthew Vernon
Hi, I think that the pom shipped with ant-contrib is broken such that mh_make will be unhappy when trying to build anything that depends upon it. mh_make is bombing out thus: [INFO] Scanning for projects... [INFO] [INFO] Bu

Re: A pile of shonky packages (with errors)

2014-02-18 Thread Matthew Vernon
Hi, > Thank you. Here are my observations: > - libxmltooling-java is missing a build dependency on > libjcip-annotations-java Fixed. > - libshib-parent-project2-java seems to be a snapshot from the trunk, is > it really the version 1? If so it should install a version '1' and a > version 'debian

Re: A pile of shonky packages (with errors)

2014-02-17 Thread Matthew Vernon
On 14/02/14 19:00, Emmanuel Bourg wrote: > Le 14/02/2014 18:37, Matthew Vernon a écrit : >> http://www.chiark.greenend.org.uk/~matthewv/javadebs/ > - libshib-parent-project2-java seems to be a snapshot from the trunk, is > it really the version 1? If so it should install a ve

Re: A pile of shonky packages (with errors)

2014-02-17 Thread Matthew Vernon
On 17/02/14 11:27, Matthew Vernon wrote: > Hi, > > On 14/02/14 19:00, Emmanuel Bourg wrote: >> Le 14/02/2014 18:37, Matthew Vernon a écrit : > > Thanks for your comments. Very helpful! > >>> * libjcip-annotations-java-doc_20060626-3.1 - possible NMU to add

Re: A pile of shonky packages (with errors)

2014-02-17 Thread Matthew Vernon
Hi, On 14/02/14 19:00, Emmanuel Bourg wrote: > Le 14/02/2014 18:37, Matthew Vernon a écrit : Thanks for your comments. Very helpful! >> * libjcip-annotations-java-doc_20060626-3.1 - possible NMU to add maven >> support to this package > > No need to do a NMU. You can up

A pile of shonky packages (with errors)

2014-02-14 Thread Matthew Vernon
Hi, I've been doing a bit more work on this, and have different problems now. I've put a whole pile of source and binary packages, and build logs here: http://www.chiark.greenend.org.uk/~matthewv/javadebs/ The thing I'm trying to get right is libxmltooling-java [0]. The problems I'm having with

"org.slf4j does not exist" error (was Re: mh_make failing due to not finding junit:junit:jar:debian)

2014-02-13 Thread Matthew Vernon
On 12/02/14 22:43, Matthew Vernon wrote: > Hi, > > Compilation (via debuild) is now failing despite my having the correct > packages: > > /home/mcv21/packages/libxmltooling-java/src/main/java/org/opensaml/xml/validation/AbstractValidatingXMLObject.java:[26,16] > package org

Re: mh_make failing due to not finding junit:junit:jar:debian

2014-02-12 Thread Matthew Vernon
Hi, On 12/02/14 16:45, Emmanuel Bourg wrote: maven.compiler.source=1.5 maven.compiler.target=1.5 Spot on again, many thanks. I'm making (slow) progress! Compilation (via debuild) is now failing despite my having the correct packages: /home/mcv21/packages/libxmltooling-java/src/m

Re: mh_make failing due to not finding junit:junit:jar:debian

2014-02-12 Thread Matthew Vernon
Hi, > You have to add a Maven rule in debian/maven.rules that rewrites the > version of junit to '4.x' instead of 'debian': Thanks, that was just the ticket. My next issue is how to specify in maven.properties (or somewhere else?) that I want to compile with a newer JDK version - currently maven

mh_make failing due to not finding junit:junit:jar:debian

2014-02-12 Thread Matthew Vernon
Hi, I'm trying to package some java libraries for Debian (actually, I want to produce a shibboleth IdP package, but it depends on some java libraries that aren't in Debian). I run it thus: mh_make -shttps://svn.shibboleth.net/java-xmltooling/branches/REL_1 java-xmltooling -plibxmltooling-java s