From a0c619ac3f0e36dc223aeb01e35b9f50e301dc74 Mon Sep 17 00:00:00 2001
From: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Date: Mon, 10 Feb 2020 22:32:37 -0500
Subject: [PATCH] Use HTTPS instead of HTTP to resolve dependencies

This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
---
 5.0.0/ARO.Console/pom.xml                               | 2 +-
 5.0.0/ARO.Core/pom.xml                                  | 4 ++--
 5.0.0/ARO.UI/pom.xml                                    | 2 +-
 5.0.0/DataCollectors/ARO.IOSCollector/pom.xml           | 8 ++++----
 5.0.0/DataCollectors/ARO.NorootAndroidCollector/pom.xml | 4 ++--
 5.0.0/DataCollectors/ARO.RootedAndroidCollector/pom.xml | 4 ++--
 6 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/5.0.0/ARO.Console/pom.xml b/5.0.0/ARO.Console/pom.xml
index 2829be45..d191ac57 100644
--- a/5.0.0/ARO.Console/pom.xml
+++ b/5.0.0/ARO.Console/pom.xml
@@ -96,7 +96,7 @@
 		<pluginRepository>
 			<id>central</id>
 			<name>MavenCentral Repository</name>
-			<url>http://repo1.maven.org/maven2</url>
+			<url>https://repo1.maven.org/maven2</url>
 		</pluginRepository>
 
 	</pluginRepositories>
diff --git a/5.0.0/ARO.Core/pom.xml b/5.0.0/ARO.Core/pom.xml
index ab1ab268..93358d79 100644
--- a/5.0.0/ARO.Core/pom.xml
+++ b/5.0.0/ARO.Core/pom.xml
@@ -33,7 +33,7 @@
 		<repository>
 			<id>com.springsource.repository.bundles.external</id>
 			<name>SpringSource Enterprise Bundle Repository - External Bundle Releases</name>
-			<url>http://repository.springsource.com/maven/bundles/external</url>
+			<url>https://repository.springsource.com/maven/bundles/external</url>
 		</repository>
 	</repositories>
 
@@ -41,7 +41,7 @@
 		<pluginRepository>
 			<id>central</id>
 			<name>MavenCentral Repository</name>
-			<url>http://repo1.maven.org/maven2</url>
+			<url>https://repo1.maven.org/maven2</url>
 		</pluginRepository>
 	</pluginRepositories>
 	<dependencies>
diff --git a/5.0.0/ARO.UI/pom.xml b/5.0.0/ARO.UI/pom.xml
index 1401ef03..41c765c5 100644
--- a/5.0.0/ARO.UI/pom.xml
+++ b/5.0.0/ARO.UI/pom.xml
@@ -36,7 +36,7 @@
 		<pluginRepository>
 			<id>central</id>
 			<name>MavenCentral Repository</name>
-			<url>http://repo1.maven.org/maven2</url>
+			<url>https://repo1.maven.org/maven2</url>
 		</pluginRepository>
 
 	</pluginRepositories>
diff --git a/5.0.0/DataCollectors/ARO.IOSCollector/pom.xml b/5.0.0/DataCollectors/ARO.IOSCollector/pom.xml
index 5fbc35ab..9d78ea65 100644
--- a/5.0.0/DataCollectors/ARO.IOSCollector/pom.xml
+++ b/5.0.0/DataCollectors/ARO.IOSCollector/pom.xml
@@ -48,7 +48,7 @@
       <repository>
 		      <id>central</id>
 		      <name>Central Repository</name>
-		      <url>http://repo.maven.apache.org/maven2</url>
+		      <url>https://repo.maven.apache.org/maven2</url>
 		      <layout>default</layout>
 		      <snapshots>
 		        <enabled>false</enabled>
@@ -80,7 +80,7 @@
    	<pluginRepository>
 	      <id>central</id>
 	      <name>Maven Plugin Repository</name>
-	      <url>http://repo1.maven.org/maven2</url>
+	      <url>https://repo1.maven.org/maven2</url>
 	      <layout>default</layout>
 	      <snapshots>
 	        <enabled>false</enabled>
@@ -138,12 +138,12 @@
 	  <repository>
 	    <id>aroDeploymentRepo</id> 
 	    <name>aro-releases</name> 
-	    <url>http://repo1.maven.org/maven2</url> 
+	    <url>https://repo1.maven.org/maven2</url> 
 	  </repository>
 	  <snapshotRepository>
 	    <id>aroDeploymentRepo</id> 
 	    <name>aro-snapshots</name> 
-	    <url>http://repo1.maven.org/maven2</url> 
+	    <url>https://repo1.maven.org/maven2</url> 
 	  </snapshotRepository>
   </distributionManagement>
 
diff --git a/5.0.0/DataCollectors/ARO.NorootAndroidCollector/pom.xml b/5.0.0/DataCollectors/ARO.NorootAndroidCollector/pom.xml
index c7880eef..8c74c118 100644
--- a/5.0.0/DataCollectors/ARO.NorootAndroidCollector/pom.xml
+++ b/5.0.0/DataCollectors/ARO.NorootAndroidCollector/pom.xml
@@ -48,7 +48,7 @@
       <repository>
 		      <id>central</id>
 		      <name>Central Repository</name>
-		      <url>http://repo.maven.apache.org/maven2</url>
+		      <url>https://repo.maven.apache.org/maven2</url>
 		      <layout>default</layout>
 		      <snapshots>
 		        <enabled>false</enabled>
@@ -80,7 +80,7 @@
    	<pluginRepository>
 	      <id>central</id>
 	      <name>Maven Plugin Repository</name>
-	      <url>http://repo1.maven.org/maven2</url>
+	      <url>https://repo1.maven.org/maven2</url>
 	      <layout>default</layout>
 	      <snapshots>
 	        <enabled>false</enabled>
diff --git a/5.0.0/DataCollectors/ARO.RootedAndroidCollector/pom.xml b/5.0.0/DataCollectors/ARO.RootedAndroidCollector/pom.xml
index ec899478..845fc5da 100644
--- a/5.0.0/DataCollectors/ARO.RootedAndroidCollector/pom.xml
+++ b/5.0.0/DataCollectors/ARO.RootedAndroidCollector/pom.xml
@@ -49,7 +49,7 @@
       <repository>
 		      <id>central</id>
 		      <name>Central Repository</name>
-		      <url>http://repo.maven.apache.org/maven2</url>
+		      <url>https://repo.maven.apache.org/maven2</url>
 		      <layout>default</layout>
 		      <snapshots>
 		        <enabled>false</enabled>
@@ -82,7 +82,7 @@
    	<pluginRepository>
 	      <id>central</id>
 	      <name>Maven Plugin Repository</name>
-	      <url>http://repo1.maven.org/maven2</url>
+	      <url>https://repo1.maven.org/maven2</url>
 	      <layout>default</layout>
 	      <snapshots>
 	        <enabled>false</enabled>