January 2011 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBAS-8151) Support CRL Validation in the services

by Anil Saldhana (JIRA)

Support CRL Validation in the services -------------------------------------- Key: JBAS-8151 URL: https://jira.jboss.org/browse/JBAS-8151 Project: JBoss Application Server Issue Type: Sub-task Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.M4 Tomcat connector can do CRL validation (users can download CRL lists from commercial CAs). I would like to see us document our CRL support for the various services. This may force us to write a separate trust manager. Please research. The key here is to document. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

4
3
0 / 0

[JBoss JIRA] Created: (JBAS-8141) Validate the Principal Mapping Framework is configurable/usable for the various services

by Anil Saldhana (JIRA)

Validate the Principal Mapping Framework is configurable/usable for the various services ---------------------------------------------------------------------------------------- Key: JBAS-8141 URL: https://jira.jboss.org/browse/JBAS-8141 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.Final We need to validate that we can use the principal mapping framework with the following services: web, ejb2 and ejb3 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

4
4
0 / 0

[JBoss JIRA] Created: (JBAS-8150) Research OCSP support for all services of the JBoss AS

by Anil Saldhana (JIRA)

Research OCSP support for all services of the JBoss AS ------------------------------------------------------ Key: JBAS-8150 URL: https://jira.jboss.org/browse/JBAS-8150 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.Final I think the tomcat connectors have the capabilities to do ocsp. Not completely sure. But it will be good to have a trust manager that can do ocsp. Starting JDK5, there have been numerous x509 enhancements. We need to document (and beef up the services) to utilize ocsp. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

4
3
0 / 0

[JBoss JIRA] Created: (SECURITY-216) Technical White Paper on SSL usage with JBoss

by Anil Saldhana (JIRA)

Technical White Paper on SSL usage with JBoss --------------------------------------------- Key: SECURITY-216 URL: http://jira.jboss.com/jira/browse/SECURITY-216 Project: JBoss Security and Identity Management Issue Type: Feature Request Security Level: Public (Everyone can see) Components: White Papers Reporter: Anil Saldhana Assigned To: Marcus Moyses Fix For: 2.0.2.GA This is one of the most critical white papers of a lot of value for JBoss users, JBoss customers as well as JBoss Support. Reference: http://wiki.jboss.org/wiki/SSLSetup Things to include: 1) Keytool examples 2) Generate CSR 3) Import Cert Chains 4) Tomcat configuration 5) RMISSL Server socket factories etc.... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

2
2
0 / 0

[JBoss JIRA] Created: (SECURITY-345) Create test case for decryption of password with leading zero for SecureIdentityLoginModule

by Marcus Moyses (JIRA)

Create test case for decryption of password with leading zero for SecureIdentityLoginModule ------------------------------------------------------------------------------------------- Key: SECURITY-345 URL: https://jira.jboss.org/jira/browse/SECURITY-345 Project: JBoss Security and Identity Management Issue Type: Sub-task Security Level: Public (Everyone can see) Components: JBossSX Affects Versions: 2.0.2.SP3 Reporter: Marcus Moyses Assignee: Marcus Moyses An example of password that would lead to an error in the decryption process is dynamcusr. Create a test case for this to guarantee the error is gone. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

3
2
0 / 0

[JBoss JIRA] Created: (EJBTHREE-1939) Enhance the plugin to allow EJB 3.1 features to be plugged into the AS

by jaikiran pai (JIRA)

Enhance the plugin to allow EJB 3.1 features to be plugged into the AS ---------------------------------------------------------------------- Key: EJBTHREE-1939 URL: https://jira.jboss.org/jira/browse/EJBTHREE-1939 Project: EJB 3.0 Issue Type: Task Components: installer, plugin Affects Versions: EJB 3.1 Reporter: jaikiran pai Assignee: jaikiran pai EJB 3.1 features are targeted for AS 6. However, some of the features can be made available through the EJB3 plugin against AS 5 (after AS 5.2 Beta is released). The objectives of this task is to: 1) Allow users to opt for the regular EJB3 bug fixes that come in from the current EJB3 plugin against AS-5 2) Allow users to opt for EJB 3.1 features through the plugin against AS-5 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

2
1
0 / 0

[JBoss JIRA] Created: (EJBTHREE-1752) Unable to create annotation for method/field create for EJB

by Eugene Torkhov (JIRA)

Unable to create annotation for method/field create for EJB ----------------------------------------------------------- Key: EJBTHREE-1752 URL: https://jira.jboss.org/jira/browse/EJBTHREE-1752 Project: EJB 3.0 Issue Type: Bug Components: ejb3 Affects Versions: AS 4.2.3.GA, AS 5.0.0.CR1 Environment: AS 5.0.0.GA Windows Reporter: Eugene Torkhov Priority: Blocker Attachments: authmanager.jar like EJBTHREE-1149 org.jboss.deployers.spi.DeploymentException: Error deploying authmanager.jar: Unable to create annotation for method/field create for EJB com.nt.workstation.security.Authentication at org.jboss.ejb3.deployers.Ejb3Deployer.deploy(Ejb3Deployer.java:203) at org.jboss.ejb3.deployers.Ejb3Deployer.deploy(Ejb3Deployer.java:104) at org.jboss.deployers.vfs.spi.deployer.AbstractVFSRealDeployer.internalDeploy(AbstractVFSRealDeployer.java:45) at org.jboss.deployers.spi.deployer.helpers.AbstractRealDeployer.deploy(AbstractRealDeployer.java:50) at org.jboss.deployers.plugins.deployers.DeployerWrapper.deploy(DeployerWrapper.java:171) at org.jboss.deployers.plugins.deployers.DeployersImpl.doDeploy(DeployersImpl.java:1439) at org.jboss.deployers.plugins.deployers.DeployersImpl.doInstallParentFirst(DeployersImpl.java:1157) at org.jboss.deployers.plugins.deployers.DeployersImpl.install(DeployersImpl.java:1098) at org.jboss.dependency.plugins.AbstractControllerContext.install(AbstractControllerContext.java:348) at org.jboss.dependency.plugins.AbstractController.install(AbstractController.java:1598) at org.jboss.dependency.plugins.AbstractController.incrementState(AbstractController.java:934) at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:1062) at org.jboss.dependency.plugins.AbstractController.resolveContexts(AbstractController.java:984) at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:822) at org.jboss.dependency.plugins.AbstractController.change(AbstractController.java:553) at org.jboss.deployers.plugins.deployers.DeployersImpl.process(DeployersImpl.java:781) at org.jboss.deployers.plugins.main.MainDeployerImpl.process(MainDeployerImpl.java:545) at org.jboss.system.server.profileservice.ProfileServiceBootstrap.loadProfile(ProfileServiceBootstrap.java:304) at org.jboss.system.server.profileservice.ProfileServiceBootstrap.start(ProfileServiceBootstrap.java:205) at org.jboss.bootstrap.AbstractServerImpl.start(AbstractServerImpl.java:405) at org.jboss.Main.boot(Main.java:209) at org.jboss.Main$1.run(Main.java:547) at java.lang.Thread.run(Unknown Source) Caused by: java.lang.RuntimeException: Unable to create annotation for method/field create for EJB com.nt.workstation.security.Authentication at org.jboss.ejb3.Ejb3DescriptorHandler.addAnnotations(Ejb3DescriptorHandler.java:2214) at org.jboss.ejb3.Ejb3DescriptorHandler.addAnnotations(Ejb3DescriptorHandler.java:2227) at org.jboss.ejb3.Ejb3DescriptorHandler.addSecurityAnnotations(Ejb3DescriptorHandler.java:1092) at org.jboss.ejb3.Ejb3DescriptorHandler.addDescriptorAnnotations(Ejb3DescriptorHandler.java:919) at org.jboss.ejb3.Ejb3DescriptorHandler.addDescriptorAnnotations(Ejb3DescriptorHandler.java:898) at org.jboss.ejb3.Ejb3DescriptorHandler.getStatelessContainer(Ejb3DescriptorHandler.java:513) at org.jboss.ejb3.Ejb3AnnotationHandler.getContainers(Ejb3AnnotationHandler.java:203) at org.jboss.ejb3.Ejb3Deployment.deployElement(Ejb3Deployment.java:668) at org.jboss.ejb3.Ejb3Deployment.deployElement(Ejb3Deployment.java:628) at org.jboss.ejb3.Ejb3Deployment.deployUrl(Ejb3Deployment.java:610) at org.jboss.ejb3.Ejb3Deployment.deploy(Ejb3Deployment.java:573) at org.jboss.ejb3.Ejb3Deployment.create(Ejb3Deployment.java:488) at org.jboss.ejb3.deployers.Ejb3Deployer.deploy(Ejb3Deployer.java:189) ... 22 more Caused by: java.lang.NoSuchFieldException: create at java.lang.Class.getDeclaredField(Unknown Source) at org.jboss.ejb3.Ejb3DescriptorHandler.addAnnotations(Ejb3DescriptorHandler.java:2166) ... 34 more -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

5
10
0 / 0

[JBoss JIRA] Created: (EJBTHREE-2158) Remove dependency between singleton component and ejb3-proxy-impl

by jaikiran pai (JIRA)

Remove dependency between singleton component and ejb3-proxy-impl ----------------------------------------------------------------- Key: EJBTHREE-2158 URL: https://jira.jboss.org/browse/EJBTHREE-2158 Project: EJB 3.0 Issue Type: Task Components: singleton Affects Versions: depchain-1.0.0-alpha-2 Reporter: jaikiran pai Assignee: jaikiran pai Currently, singleton-proxy-impl depends on ejb3-proxy-impl to re-use the existing proxy to container communication logic. This dependency needs to be broken. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

2
1
0 / 0

[JBoss JIRA] Created: (JBMETA-312) Use determineResolvedJndiName in getInvokerBinding of EJB2.x entity and session bean metadata

by jaikiran pai (JIRA)

Use determineResolvedJndiName in getInvokerBinding of EJB2.x entity and session bean metadata --------------------------------------------------------------------------------------------- Key: JBMETA-312 URL: https://jira.jboss.org/browse/JBMETA-312 Project: JBoss Metadata Issue Type: Task Security Level: Public (Everyone can see) Affects Versions: jboss-metadata-ejb-2.0.0-alpha-21 Reporter: jaikiran pai Assignee: jaikiran pai The getInvokerBinding in EntityMetaData and SessionMetaData currently don't take into account the binding policy while generating the jndi name. These methods should use the determineResolvedJndiName to utilize the binding policy while resolving the jndi name. -- This message is automatically generated by JIRA. - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

2
4
0 / 0

[JBoss JIRA] Created: (JBAS-8569) Disable ENC injector creations in EJB container

by jaikiran pai (JIRA)

Disable ENC injector creations in EJB container ------------------------------------------------ Key: JBAS-8569 URL: https://jira.jboss.org/browse/JBAS-8569 Project: JBoss Application Server Issue Type: Sub-task Security Level: Public (Everyone can see) Reporter: jaikiran pai Assignee: jaikiran pai -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

14 years, 8 months

4
3
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira January 2011