hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sean Busbey (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HBASE-12894) Upgrade Jetty to 9.2.6
Date Thu, 17 Nov 2016 07:06:58 GMT

     [ https://issues.apache.org/jira/browse/HBASE-12894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sean Busbey updated HBASE-12894:
--------------------------------
    Status: In Progress  (was: Patch Available)

{code}
+  <supplement>
+    <project>
+      <groupId>org.javassist</groupId>
+      <artifactId>javassist</artifactId>
+      <licenses>
+        <license>
+          <name>Mozilla Public License Version 1.1</name>
+          <url>https://www.mozilla.org/en-US/MPL/1.1/</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
{code}

javassist's website and pom both claim that it can be distributed under ALv2. Please switch
to that license instead of MPL 1.1.

{code}
+  <supplement>
+    <project>
+      <groupId>javax.servlet.jsp</groupId>
+      <artifactId>javax.servlet.jsp-api</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
{code}

According to the header on the pom, headers on the source, and [the project website|https://jsp.java.net/license.html],
this should be CDDL 1.1.

{code}
+  <supplement>
+    <project>
+      <groupId>org.glassfish</groupId>
+      <artifactId>javax.el</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
{code}

I think this one is fine, but it's worth including a comment that the project page + pom license
section indicates CDDLv1.0, while the headers on both the pom and all the source files indicated
CDDLv1.1.

{code}
+  <supplement>
+    <project>
+      <groupId>org.glassfish.hk2</groupId>
+      <artifactId>hk2-api</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
+  <supplement>
+    <project>
+      <groupId>org.glassfish.hk2</groupId>
+      <artifactId>hk2-locator</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
+  <supplement>
+    <project>
+      <groupId>org.glassfish.hk2</groupId>
+      <artifactId>hk2-utils</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>

... SNIP ...
+  <supplement>
+    <project>
+      <groupId>org.glassfish.hk2.external</groupId>
+      <artifactId>aopalliance-repackaged</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
+  <supplement>
+    <project>
+      <groupId>org.glassfish.hk2.external</groupId>
+      <artifactId>javax.inject</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
{code}

headers, pom license section, and project page all say these 5 should be CDDL v1.1.

{code}
+  <supplement>
+    <project>
+      <groupId>org.glassfish.jersey.bundles.repackaged</groupId>
+      <artifactId>jersey-guava</artifactId>
+      <licenses>
+        <license>
+          <name>Common Development and Distribution License (CDDL) v1.0</name>
+          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </project>
+  </supplement>
{code}

headers, pom license, project file says this is CDDLv1.1.

I presume the rest of the jersey things listed as CDDLv1.0 probably should also be CDDLv1.1.
I stopped reviewing at this jersey-guava entry.

Please make the above corrections and review the remaining dependencies to ensure they have
the correct license information. 

Moving out of patch available pending corrections.

> Upgrade Jetty to 9.2.6
> ----------------------
>
>                 Key: HBASE-12894
>                 URL: https://issues.apache.org/jira/browse/HBASE-12894
>             Project: HBase
>          Issue Type: Improvement
>          Components: REST, UI
>    Affects Versions: 0.98.0
>            Reporter: Rick Hallihan
>            Assignee: Guang Yang
>            Priority: Critical
>              Labels: MicrosoftSupport
>             Fix For: 2.0.0
>
>         Attachments: HBASE-12894_Jetty9_v0.patch, HBASE-12894_Jetty9_v1.patch, HBASE-12894_Jetty9_v1.patch,
HBASE-12894_Jetty9_v2.patch, HBASE-12894_Jetty9_v3.patch, HBASE-12894_Jetty9_v4.patch, HBASE-12894_Jetty9_v5.patch,
HBASE-12894_Jetty9_v6.patch, HBASE-12894_Jetty9_v7.patch, HBASE-12894_Jetty9_v8.patch, dependency_list_after,
dependency_list_before
>
>
> The Jetty component that is used for the HBase Stargate REST endpoint is version 6.1.26
and is fairly outdated. We recently had a customer inquire about enabling cross-origin resource
sharing (CORS) for the REST endpoint and found that this older version does not include the
necessary filter or configuration options, highlighted at: http://wiki.eclipse.org/Jetty/Feature/Cross_Origin_Filter
> The Jetty project has had significant updates through versions 7, 8 and 9, including
a transition to be an Eclipse subproject, so updating to the latest version may be non-trivial.
The last update to the Jetty component in https://issues.apache.org/jira/browse/HBASE-3377
was a minor version update and did not require significant work. This update will include
a package namespace update so there will likely be a larger number of required changes. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message