[JBoss JIRA] (WFLY-6835) Vault.sh misleading output
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-6835?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse reassigned WFLY-6835:
--------------------------------------
Assignee: Peter Skopek (was: Darran Lofthouse)
> Vault.sh misleading output
> --------------------------
>
> Key: WFLY-6835
> URL: https://issues.jboss.org/browse/WFLY-6835
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Martin Choma
> Assignee: Peter Skopek
> Priority: Minor
>
> Vault.sh advise to insert vault xml snippet as follows:
> {code}
> Vault Configuration in AS7 config file:
> ********************************************
> ...
> </extensions>
> <vault>
> <vault-option name="KEYSTORE_URL" value="EAP_HOME/vault/vault.keystore"/>
> <vault-option name="KEYSTORE_PASSWORD" value="MASK-5dOaAVafCSd"/>
> <vault-option name="KEYSTORE_ALIAS" value="vault"/>
> <vault-option name="SALT" value="1234abcd"/>
> <vault-option name="ITERATION_COUNT" value="120"/>
> <vault-option name="ENC_FILE_DIR" value="EAP_HOME/vault/"/>
> </vault><management> ...
> ********************************************
> {code}
> 1. User can insert this snippet on wrong place. See forum link for example. Pobably CLI command would be more suitable?
> {code}
> /core-service=vault:add(vault-options=[("KEYSTORE_URL" => "PATH_TO_KEYSTORE"),("KEYSTORE_PASSWORD" => "MASKED_PASSWORD"),("KEYSTORE_ALIAS" => "ALIAS"),("SALT" => "SALT"),("ITERATION_COUNT" => "ITERATION_COUNT"),("ENC_FILE_DIR" => "ENC_FILE_DIR")])
> {code}
> 2. There is still reference to AS7
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 3 months
[JBoss JIRA] (WFLY-7104) Elytron properties-realm enforces REALM_NAME comment
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-7104?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse updated WFLY-7104:
-----------------------------------
Fix Version/s: 11.0.0.Alpha1
> Elytron properties-realm enforces REALM_NAME comment
> ----------------------------------------------------
>
> Key: WFLY-7104
> URL: https://issues.jboss.org/browse/WFLY-7104
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Josef Cacek
> Assignee: Darran Lofthouse
> Fix For: 11.0.0.Alpha1
>
>
> Elytron enforces existence of {{"#$REALM_NAME=...$"}} comment in property file referenced from properties-realms.
> When using legacy security and this line is missing, server starts without error.
> *Expected behavior:*
> Elytron's properties-realm *doesn't require* this comment. If the comment is present, it *may* verify if its content fits the realm name.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 3 months
[JBoss JIRA] (WFLY-7125) Required attributes of elytron key-store creation add operation
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-7125?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse updated WFLY-7125:
-----------------------------------
Summary: Required attributes of elytron key-store creation add operation (was: Required attributes of elytron key-store creation CLI command)
> Required attributes of elytron key-store creation add operation
> ---------------------------------------------------------------
>
> Key: WFLY-7125
> URL: https://issues.jboss.org/browse/WFLY-7125
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 11.0.0.Alpha1
> Reporter: Martin Choma
> Assignee: Darran Lofthouse
> Priority: Critical
> Labels: user_experience
> Fix For: 11.0.0.Alpha1
>
>
> Minimal CLI command to create key store is
> {code}
> /subsystem=elytron/key-store=server:add(type="JKS")
> {code}
> But it has these problems:
> * Password attribute has to be required. I can't think of case when that could be ommited.
> * Attribute {{type}} could be optional. If not set default value can be Keystore.getDefaultType(). As model cant't express this, it can be documented in description.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 3 months