Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-30803

Prepare for the Git protocol security change

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Resolved
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Admin Center, Preview

      Description

      As detailed in this post, Github will turn off the unencrypted Git protocol.

      A final brownout happened on January 11th, 2022 and resulted in errors in Nuxeo build such as:

      [2022-01-11T15:59:55.170Z]      [exec] bower webcomponentsjs#0.7.23                validate 0.7.23 against https://github.com/Polymer/webcomponentsjs.git#0.7.23
      
      [2022-01-11T15:59:57.074Z]      [exec] bower moment#2.10.6                         download https://github.com/moment/moment/archive/2.10.6.tar.gz
      
      [2022-01-11T15:59:57.333Z]      [exec] bower moment#2.10.6                          extract archive.tar.gz
      
      [2022-01-11T15:59:57.901Z]      [exec] bower font-roboto#1.0.1                      ECMDERR Failed to execute "git ls-remote --tags --heads git://github.com/PolymerElements/font-roboto.git", exit code of #128 fatal: remote error:    The unauthenticated git protocol on port 9418 is no longer supported. Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
      
      [2022-01-11T15:59:57.901Z]      [exec] 
      
      [2022-01-11T15:59:57.901Z]      [exec] Additional error details:
      
      [2022-01-11T15:59:57.901Z]      [exec] fatal: remote error: 
      
      [2022-01-11T15:59:57.901Z]      [exec]   The unauthenticated git protocol on port 9418 is no longer supported.
      
      [2022-01-11T15:59:57.901Z]      [exec] Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
      
      [2022-01-11T15:59:57.901Z]      [exec] bower moment#2.10.6                         resolved https://github.com/moment/moment.git#2.10.6
      

      Changes will be made permanent on March 15, 2022.

      Theoretically, we'll have to clean all our bower.json and packages.json of our repositories to change any git://github.com/ into https://github.com/.

      However, we may have issues with transitive dependencies that we can't clean up. An alternative would be to run

      git config --global url."https://github.com/".insteadOf git://github.com/
      

      See https://stackoverflow.com/questions/70663523/the-unauthenticated-git-protocol-on-port-9418-is-no-longer-supported

      Note that in the platform, the affected module will be:

      • nuxeo-dm/nuxeo-platform-webapp
      • nuxeo-features/nuxeo-admin-center/nuxeo-admin-center-analytics
      • nuxeo-features/preview/nuxeo-preview-core
        and probably more in addons.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                grenard Guillaume Renard
                Participants:
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: