Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
diff --git a/assemblies/apache-servicemix-examples/src/main/filtered-resources/pom.xml b/assemblies/apache-servicemix-examples/src/main/filtered-resources/pom.xml
index 778ef74..5881c6a 100644
--- a/assemblies/apache-servicemix-examples/src/main/filtered-resources/pom.xml
+++ b/assemblies/apache-servicemix-examples/src/main/filtered-resources/pom.xml
@@ -192,7 +192,7 @@
<repository>
<id>apache.snapshots</id>
<name>Apache Snapshot Repository</name>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
<releases>
<enabled>false</enabled>
</releases>
diff --git a/assemblies/apache-servicemix/pom.xml b/assemblies/apache-servicemix/pom.xml
index 6648f60..5bdc4a8 100644
--- a/assemblies/apache-servicemix/pom.xml
+++ b/assemblies/apache-servicemix/pom.xml
@@ -140,7 +140,7 @@
<repository>
<id>com.springsource.repository.bundles.release</id>
<name>SpringSource Enterprise Bundle Repository - SpringSource Bundle Releases</name>
- <url>http://repository.springsource.com/maven/bundles/release</url>
+ <url>https://repository.springsource.com/maven/bundles/release</url>
<releases>
<enabled>true</enabled>
</releases>
diff --git a/pom.xml b/pom.xml
index 662e524..7f0fd9c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -98,7 +98,7 @@
<pluginRepository>
<id>apache.snapshots</id>
<name>Apache Snapshot Repository</name>
- <url>http://repository.apache.org/snapshots</url>
+ <url>https://repository.apache.org/snapshots</url>
<releases>
<enabled>false</enabled>
</releases>
