SonarSource/sonar-runner — pull request #4 by markjamesbutler (2014-02-24 23:22:34+00:00)
Title: Sonar shouldn't trust all certificates and hosts as default

I recently discovered that the Sonar runner is trusting all certificates and hosts as default. Obviously this has security concerns. I've removed the offending lines from the sonar-runner.

This is causing issues due to an issue with the httprequest library detailed here:

https://github.com/kevinsawicki/http-request/pull/74

This means we cannot run the Sonar Server on a host requiring certificates.

When you accept this change could you please update your related sonar-maven-plugin pom files so I can grab the new version and start using the plugin against my certificated host.

Furthermore, I had issues getting all the tests to pass before making the change. Could you please confirm the exact goals you use to run them?

Mark