oss-review-toolkit / ort

A suite of tools to automate software compliance checks.
https://oss-review-toolkit.org
Apache License 2.0
1.61k stars 313 forks source link

Package download fails for open-jdk #9489

Closed cgi-ricardo closed 18 hours ago

cgi-ricardo commented 5 days ago

Describe the bug

We provide https://hg.openjdk.org/jdk-updates/jdk9u/archive/1b1226687b89.zip to ORT to download but it fails with:

IOException: Could not resolve provenance for package 'Unmanaged::open-jdk:9.0.4+12' for source code origins [VCS, ARTIFACT]. Resolution of ARTIFACT failed with: StreamResetException: stream was reset: INTERNAL_ERROR

To Reproduce

Run ORT with input:

    packages:
    - id: "Unmanaged::open-jdk:9.0.4+12"
      purl: ""
      declared_licenses: []
      declared_licenses_processed: {}
      description: ""
      homepage_url: ""
      binary_artifact:
        url: ""
        hash:
          value: ""
          algorithm: ""
      source_artifact:
        url: "https://hg.openjdk.org/jdk-updates/jdk9u/archive/1b1226687b89.zip"
        hash:
          value: ""
          algorithm: ""
      vcs:
        type: ""
        url: ""
        revision: ""
        path: ""
      vcs_processed:
        type: ""
        url: ""
        revision: ""
        path: ""

Expected behavior

ORT should download it and get the output data result

Console / log output

n/a

Environment

  environment:
    ort_version: "25.1.0"
    build_jdk: "11.0.23+9"
    java_version: "17.0.11"
    os: "Linux"
sschuberth commented 5 days ago

I can easily reproduce this with

ort download --project-url https://hg.openjdk.org/jdk-updates/jdk9u/archive/1b1226687b89.zip --output-dir out/issues/9489
sschuberth commented 5 days ago

According to comments like this, it's a server-side configuration problem that I'm unsure how to work around.

Can you maybe just use another download location for that JDK, @cgi-ricardo?

cgi-ricardo commented 18 hours ago

ok, thanks for the clarification. I will go forward with another download location