June 2016 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFCORE-1597) Do a lenient case insensitive check for JKS keystore provider type in the configured truststore of a security realm

by Brian Stansberry (JIRA)

[ https://issues.jboss.org/browse/WFCORE-1597?page=com.atlassian.jira.plugi... ] Brian Stansberry reassigned WFCORE-1597: ---------------------------------------- Fix Version/s: 3.0.0.Alpha2 2.2.0.CR3 Assignee: jaikiran pai (was: Brian Stansberry) Resolution: Done Thanks, jaikiran! > Do a lenient case insensitive check for JKS keystore provider type in the configured truststore of a security realm > ------------------------------------------------------------------------------------------------------------------- > > Key: WFCORE-1597 > URL: https://issues.jboss.org/browse/WFCORE-1597 > Project: WildFly Core > Issue Type: Enhancement > Components: Domain Management > Affects Versions: 2.2.0.CR2, 3.0.0.Alpha1 > Environment: WildFly 10.0.0.Final > Reporter: jaikiran pai > Assignee: jaikiran pai > Fix For: 3.0.0.Alpha2, 2.2.0.CR3 > > > One of the users of WildFly 10.0.0.Final reports that when he configured the truststore as follows: > {code} > <truststore provider="jks" path="server.truststore" relative-to="jboss.server.config.dir" keystore-password="#######"/> > {code} > Notice the value for provider - it's lower case jks. Apparently this causes issues and the truststore doesn't work. It works when the value is set to JKS instead. > Looking at the code in SecurityRealmAddHandler it does a case sensitive check on the value to see if it's a JKS provider and if it is, only then does it use the configured keystore relative path. Otherwise, it just ignores the keystore relative path and leads to hard to debug SSL issues. > I think it would be better to do a case insensitive check to see if JKS is the configured keystore provider. > The relevant forum thread discussion is here https://developer.jboss.org/message/958142#958142 -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-1565) Upgrade JBoss Remoting from 4.0.18 to 4.0.21

by Brian Stansberry (JIRA)

[ https://issues.jboss.org/browse/WFCORE-1565?page=com.atlassian.jira.plugi... ] Brian Stansberry reassigned WFCORE-1565: ---------------------------------------- Assignee: David Lloyd (was: Brian Stansberry) Resolution: Done > Upgrade JBoss Remoting from 4.0.18 to 4.0.21 > -------------------------------------------- > > Key: WFCORE-1565 > URL: https://issues.jboss.org/browse/WFCORE-1565 > Project: WildFly Core > Issue Type: Component Upgrade > Reporter: Bartosz Baranowski > Assignee: David Lloyd > Fix For: 3.0.0.Alpha2, 2.2.0.CR3 > > -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-1190) Deprecate permgen attributes in the xsd

by Brian Stansberry (JIRA)

[ https://issues.jboss.org/browse/WFCORE-1190?page=com.atlassian.jira.plugi... ] Brian Stansberry reassigned WFCORE-1190: ---------------------------------------- Assignee: Brian Stansberry Resolution: Done > Deprecate permgen attributes in the xsd > --------------------------------------- > > Key: WFCORE-1190 > URL: https://issues.jboss.org/browse/WFCORE-1190 > Project: WildFly Core > Issue Type: Sub-task > Components: Domain Management > Reporter: Brian Stansberry > Assignee: Brian Stansberry > Fix For: 3.0.0.Alpha2 > > > Part of the parent task related to changing the xsd. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-539) Infinite loop in WildFlySecurityManagerPermissionCollection.readResolve() method

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-539?page=com.atlassian.jira.plugin.sy... ] David Lloyd resolved ELY-539. ----------------------------- Assignee: David Lloyd (was: Darran Lofthouse) Resolution: Done Fixed at same time as ELY-358. > Infinite loop in WildFlySecurityManagerPermissionCollection.readResolve() method > -------------------------------------------------------------------------------- > > Key: ELY-539 > URL: https://issues.jboss.org/browse/ELY-539 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: David Lloyd > Labels: static_analysis > > There is infinite loop in WildFlySecurityManagerPermissionCollection.readResolve() on line 61 [1]. Variable {{bits}} is never changed in {{while}} cycle. > [1] https://github.com/wildfly-security/wildfly-elytron/blob/ef67225884aa79b8... -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-540) Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-540?page=com.atlassian.jira.plugin.sy... ] David Lloyd resolved ELY-540. ----------------------------- Fix Version/s: 1.1.0.Beta7 Assignee: David Lloyd (was: Darran Lofthouse) Resolution: Done It looks like this was fixed at some point. All the paths to calling these methods are preceded by null checks. > Missing null check in ServerAuthenticationContext.NameAssignedState.isSamePrincipal() method > -------------------------------------------------------------------------------------------- > > Key: ELY-540 > URL: https://issues.jboss.org/browse/ELY-540 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: David Lloyd > Labels: static_analysis > Fix For: 1.1.0.Beta7 > > > In method {{isSamePrincipal(final Principal principal)}} of org.wildfly.security.auth.server.ServerAuthenticationContext.NameAssignedState null value can be assigned to variable {{name}}. It can result to NPE when null value is passed to following {{isSameName}} method. Check whether {{name}} is not null should be added before {{isSameName(name)}} calling. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-541) Invocation of hashCode on array in GeneralName.IPAddress

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-541?page=com.atlassian.jira.plugin.sy... ] David Lloyd resolved ELY-541. ----------------------------- Fix Version/s: 1.1.0.Beta7 Resolution: Done Was fixed with the X.50X certificate operations PR. > Invocation of hashCode on array in GeneralName.IPAddress > -------------------------------------------------------- > > Key: ELY-541 > URL: https://issues.jboss.org/browse/ELY-541 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: Darran Lofthouse > Labels: static_analysis > Fix For: 1.1.0.Beta7 > > > Internal class IPAddress from org.wildfly.security.sasl.entity.GeneralName invocates {{hashCode}} method on array. {{Arrays.hashCode}} method should be rather used. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-542) Incorrectly implemented applyFilter method of ProtocolSelector.RemovingProtocolSelector

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-542?page=com.atlassian.jira.plugin.sy... ] David Lloyd reassigned ELY-542: ------------------------------- Assignee: David Lloyd (was: Darran Lofthouse) > Incorrectly implemented applyFilter method of ProtocolSelector.RemovingProtocolSelector > --------------------------------------------------------------------------------------- > > Key: ELY-542 > URL: https://issues.jboss.org/browse/ELY-542 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: David Lloyd > Labels: static_analysis > > Method applyFilter from org.wildfly.security.ssl.ProtocolSelector.RemovingProtocolSelector is incorrectly implemented. {{Set<Protocol> enabled}} cannot contain (and therefore cannot remove) {{EnumSet<Protocol> protocols}}. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-543) Missing null check in constructor of AbstractDigestMechanism

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-543?page=com.atlassian.jira.plugin.sy... ] David Lloyd reassigned ELY-543: ------------------------------- Assignee: David Lloyd (was: Darran Lofthouse) > Missing null check in constructor of AbstractDigestMechanism > ------------------------------------------------------------ > > Key: ELY-543 > URL: https://issues.jboss.org/browse/ELY-543 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: David Lloyd > Labels: static_analysis > > There is missing null check in constructor of org.wildfly.security.sasl.digest.AbstractDigestMechanism. Calling of {{messageDigestAlgorithm(mechanismName)}} on line 133 [1] can return null which results to NPE thrown from {{MessageDigest.getInstance(null)}}. > [1] https://github.com/wildfly-security/wildfly-elytron/blob/ef67225884aa79b8... -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-545) Missing null checks in URIUtil.getHostForURI(SocketAddress socketAddress) method

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-545?page=com.atlassian.jira.plugin.sy... ] David Lloyd reassigned ELY-545: ------------------------------- Assignee: David Lloyd (was: Darran Lofthouse) > Missing null checks in URIUtil.getHostForURI(SocketAddress socketAddress) method > -------------------------------------------------------------------------------- > > Key: ELY-545 > URL: https://issues.jboss.org/browse/ELY-545 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: David Lloyd > Labels: static_analysis > > There is public static method org.wildfly.security.util.URIUtil.getHostForURI(SocketAddress socketAddress) with missing null checks for {{hostString}} and {{address}}. This method can be publicly accessed and result to NPE. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

[JBoss JIRA] (ELY-546) Missing null check in SecurityDomain.mapName() method

by David Lloyd (JIRA)

[ https://issues.jboss.org/browse/ELY-546?page=com.atlassian.jira.plugin.sy... ] David Lloyd reassigned ELY-546: ------------------------------- Assignee: David Lloyd (was: Darran Lofthouse) > Missing null check in SecurityDomain.mapName() method > ----------------------------------------------------- > > Key: ELY-546 > URL: https://issues.jboss.org/browse/ELY-546 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.0.Beta5 > Reporter: Ondrej Lukas > Assignee: David Lloyd > Labels: static_analysis > > There is missing null check in org.wildfly.security.auth.server.SecurityDomain.mapName(String name) method. Parameter {{name}} can be changed to null on line 162 [1] which can result to NPE in following command on line 163. Null check should be added. > [1] https://github.com/wildfly-security/wildfly-elytron/blob/ef67225884aa79b8... -- This message was sent by Atlassian JIRA (v6.4.11#64026)

9 years, 11 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira June 2016