Alvin Lee

icon indicating a website link http://medium.com/@alvinslee icon indicating an email [email protected]

icon company Out of the Box Development icon location Phoenix, AZ

Results 2 issues of Alvin Lee

cve-neo: Maven 3.8.4 download no longer available. Use 3.8.8 instead.

The [Dockerfile call to wget and extract Maven](https://github.com/cyberxml/log4j-poc/blob/f9169984efaa9e51eb871060b6069ce029a57490/cve-neo/Dockerfile#L10C1-L12C42) references an old version (`3.8.4`) that is no longer available. Receiving a 404. Should be updated to `3.8.8` throughout.

wget call in Dockerfile should use --no-check-certificate

[Dockerfile](https://github.com/cyberxml/log4j-poc/blob/f9169984efaa9e51eb871060b6069ce029a57490/cve-web/Dockerfile#L21C5-L21C95) for `cve-web` includes a `wget` call to archive.apache.org. This is causing an error: ``` 0.888 ERROR: The certificate of 'archive.apache.org' is not trusted. 0.888 ERROR: The certificate of 'archive.apache.org'...