October 2011 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBAS-8151) Support CRL Validation in the services

by Anil Saldhana (JIRA)

Support CRL Validation in the services -------------------------------------- Key: JBAS-8151 URL: https://jira.jboss.org/browse/JBAS-8151 Project: JBoss Application Server Issue Type: Sub-task Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.M4 Tomcat connector can do CRL validation (users can download CRL lists from commercial CAs). I would like to see us document our CRL support for the various services. This may force us to write a separate trust manager. Please research. The key here is to document. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

4
3
0 / 0

[JBoss JIRA] Created: (JBAS-8141) Validate the Principal Mapping Framework is configurable/usable for the various services

by Anil Saldhana (JIRA)

Validate the Principal Mapping Framework is configurable/usable for the various services ---------------------------------------------------------------------------------------- Key: JBAS-8141 URL: https://jira.jboss.org/browse/JBAS-8141 Project: JBoss Application Server Issue Type: Task Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.Final We need to validate that we can use the principal mapping framework with the following services: web, ejb2 and ejb3 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

4
4
0 / 0

[JBoss JIRA] Created: (JBAS-8150) Research OCSP support for all services of the JBoss AS

by Anil Saldhana (JIRA)

Research OCSP support for all services of the JBoss AS ------------------------------------------------------ Key: JBAS-8150 URL: https://jira.jboss.org/browse/JBAS-8150 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public (Everyone can see) Components: Security Reporter: Anil Saldhana Assignee: Marcus Moyses Fix For: 6.0.0.Final I think the tomcat connectors have the capabilities to do ocsp. Not completely sure. But it will be good to have a trust manager that can do ocsp. Starting JDK5, there have been numerous x509 enhancements. We need to document (and beef up the services) to utilize ocsp. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

4
3
0 / 0

[JBoss JIRA] Created: (SECURITY-216) Technical White Paper on SSL usage with JBoss

by Anil Saldhana (JIRA)

Technical White Paper on SSL usage with JBoss --------------------------------------------- Key: SECURITY-216 URL: http://jira.jboss.com/jira/browse/SECURITY-216 Project: JBoss Security and Identity Management Issue Type: Feature Request Security Level: Public (Everyone can see) Components: White Papers Reporter: Anil Saldhana Assigned To: Marcus Moyses Fix For: 2.0.2.GA This is one of the most critical white papers of a lot of value for JBoss users, JBoss customers as well as JBoss Support. Reference: http://wiki.jboss.org/wiki/SSLSetup Things to include: 1) Keytool examples 2) Generate CSR 3) Import Cert Chains 4) Tomcat configuration 5) RMISSL Server socket factories etc.... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

2
2
0 / 0

[JBoss JIRA] Created: (SECURITY-345) Create test case for decryption of password with leading zero for SecureIdentityLoginModule

by Marcus Moyses (JIRA)

Create test case for decryption of password with leading zero for SecureIdentityLoginModule ------------------------------------------------------------------------------------------- Key: SECURITY-345 URL: https://jira.jboss.org/jira/browse/SECURITY-345 Project: JBoss Security and Identity Management Issue Type: Sub-task Security Level: Public (Everyone can see) Components: JBossSX Affects Versions: 2.0.2.SP3 Reporter: Marcus Moyses Assignee: Marcus Moyses An example of password that would lead to an error in the decryption process is dynamcusr. Create a test case for this to guarantee the error is gone. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

3
2
0 / 0

[JBoss JIRA] (JGRP-1381) AUTH protocol has no getter for AuthToken, preventing access to the token for programmatic configuration

by Jochen X (Created) (JIRA)

AUTH protocol has no getter for AuthToken, preventing access to the token for programmatic configuration -------------------------------------------------------------------------------------------------------- Key: JGRP-1381 URL: https://issues.jboss.org/browse/JGRP-1381 Project: JGroups Issue Type: Bug Affects Versions: 2.12.2, 3.0 Reporter: Jochen X Assignee: Bela Ban The AUTH protocol creates the auth token when setAuthClass is called. However, there is no getter for the token, so it cannot be obtained from the AUTH protocol and configured programmatically (e.g. to set the password). Effectively, this renders the AUTH protocol unusable. A solution would be to supply accessors (getter and setter) for the token, so the protocol can be configured correctly. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

3
2
0 / 0

[JBoss JIRA] (JBRULES-3269) Drools NPE on SlidingTimeWindowComparator

by Diego Naya (Created) (JIRA)

Drools NPE on SlidingTimeWindowComparator ----------------------------------------- Key: JBRULES-3269 URL: https://issues.jboss.org/browse/JBRULES-3269 Project: Drools Issue Type: Bug Security Level: Public (Everyone can see) Affects Versions: 5.3.0.Final Reporter: Diego Naya Assignee: Mark Proctor Exception in thread "Thread-0" org.drools.RuntimeDroolsException: Unexpected exception executing action org.drools.rule.SlidingTimeWindow$BehaviorExpireWMAction@1737712 at org.drools.common.AbstractWorkingMemory.executeQueuedActions(AbstractWorkingMemory.java:973) at org.drools.common.DefaultAgenda.fireUntilHalt(DefaultAgenda.java:1231) at org.drools.common.AbstractWorkingMemory.fireUntilHalt(AbstractWorkingMemory.java:753) at org.drools.common.AbstractWorkingMemory.fireUntilHalt(AbstractWorkingMemory.java:729) at org.drools.impl.StatefulKnowledgeSessionImpl.fireUntilHalt(StatefulKnowledgeSessionImpl.java:234) at com.sample.DroolsTest$1.run(DroolsTest.java:35) Caused by: java.lang.NullPointerException at org.drools.rule.SlidingTimeWindow$SlidingTimeWindowComparator.compare(SlidingTimeWindow.java:232) at org.drools.rule.SlidingTimeWindow$SlidingTimeWindowComparator.compare(SlidingTimeWindow.java:227) at java.util.PriorityQueue.siftDownUsingComparator(PriorityQueue.java:661) at java.util.PriorityQueue.siftDown(PriorityQueue.java:629) at java.util.PriorityQueue.poll(PriorityQueue.java:540) at java.util.AbstractQueue.remove(AbstractQueue.java:114) at org.drools.rule.SlidingTimeWindow.expireTuples(SlidingTimeWindow.java:164) at org.drools.rule.SlidingTimeWindow$BehaviorExpireWMAction.execute(SlidingTimeWindow.java:431) at org.drools.common.AbstractWorkingMemory.executeQueuedActions(AbstractWorkingMemory.java:971) ... 5 more -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

5
5
0 / 0

[JBoss JIRA] (AS7-2377) Console: should not be able to set queue as durable

by Naveen Malik (Created) (JIRA)

Console: should not be able to set queue as durable --------------------------------------------------- Key: AS7-2377 URL: https://issues.jboss.org/browse/AS7-2377 Project: Application Server 7 Issue Type: Bug Components: Console, JMS Affects Versions: 7.1.0.Alpha1 Environment: RHEL 6 Reporter: Naveen Malik Assignee: Heiko Braun Queues shouldn't be tagged as durable, topics are what can be durable or not. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

4
5
0 / 0

[JBoss JIRA] (AS7-2398) Create XA Datasource xa-properties not apparent

by Matt Davis (Created) (JIRA)

Create XA Datasource xa-properties not apparent ----------------------------------------------- Key: AS7-2398 URL: https://issues.jboss.org/browse/AS7-2398 Project: Application Server 7 Issue Type: Feature Request Components: Console Affects Versions: 7.1.0.Alpha1 Reporter: Matt Davis Assignee: Heiko Braun Not sure what to add to the XA properties section for XA datasource configuration. Would this be something like track-connection-by-tx? It would be nice to know what the options are for this configuration. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

3
2
0 / 0

[JBoss JIRA] (AS7-2353) Web Console: No way to configure an https connector

by Jim Tyrrell (Created) (JIRA)

Web Console: No way to configure an https connector --------------------------------------------------- Key: AS7-2353 URL: https://issues.jboss.org/browse/AS7-2353 Project: Application Server 7 Issue Type: Feature Request Components: Console Reporter: Jim Tyrrell Assignee: Heiko Braun Attachments: Screen shot 2011-10-26 at 1.32.06 PM.png Customers will need the ability to enable a https connector for web traffic. See the attached screen shot for where this might go. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

13 years

5
4
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira October 2011