Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-26353

signatures and checksums can be imported even if associated artifact import fails

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: New
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.29.2
    • Fix Version/s: None
    • Component/s: import-export, Maven
    • Labels:
    • Notability:
      n/a

      Description

      Try to import into a Maven hosted repository a source Maven repository which contains
      a GAV primary artifact plus all the normal ancillary files such as

      • *.asc
      • *.asc.md5
      • *.asc.sha1
      • *.sha1
      • *.sha256
      • *.sha512
      • *.md5

      For example, trying to import a directory such as this one in Maven Central:

      https://repo1.maven.org/maven2/org/apache/servicemix/geronimo/servicemix/3.2.1/

      which contains:

      servicemix-3.2.1.car
      servicemix-3.2.1.car.asc
      servicemix-3.2.1.car.asc.md5
      servicemix-3.2.1.car.asc.sha1
      servicemix-3.2.1.car.md5
      servicemix-3.2.1.car.sha1
      

      The car file import may fail ( due to content validation ), but all the other files are imported.

      2021-01-08 18:54:39,730-0400 INFO  [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Importing /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car.asc.md5
      2021-01-08 18:54:39,751-0400 INFO  [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Importing /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car
      2021-01-08 18:54:39,753-0400 WARN  [quartz-9-thread-2]  *SYSTEM org.sonatype.nexus.repository.storage.StorageTxImpl - An exception occurred determining the content type of asset org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car in repository central-hosted
      2021-01-08 18:54:39,754-0400 ERROR [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Import of file /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car into repository central-hosted failed
      org.sonatype.nexus.repository.InvalidContentException: Detected content type [application/zip, application/x-zip-compressed], but expected [application/vnd.curl.car]: org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car
      2021-01-08 18:54:39,754-0400 INFO  [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Importing /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car.md5
      2021-01-08 18:54:39,802-0400 INFO  [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Importing /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car.asc
      2021-01-08 18:54:39,823-0400 INFO  [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Importing /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car.asc.sha1
      2021-01-08 18:54:39,823-0400 INFO  [quartz-9-thread-2]  *SYSTEM com.sonatype.nexus.exportimport.orient.internal.importtask.OrientRepositoryImportService - Importing /import-data/central-releases/org/apache/servicemix/geronimo/servicemix/3.2.1/servicemix-3.2.1.car.sha1
      

      Expected

      Since some file extensions which are suffixed to main artifacts are well known in the maven format ( asc, md5, sha1, etc.) to be relevant only to the main artifact they are prefixed with, then if the matching file import fails, do not import the well known ancillary file extensions.

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            plynch Peter Lynch
            Last Updated By:
            Joe Tom Joe Tom
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:

                tigCommentSecurity.panel-title