[JBoss JIRA] (ELY-1027) CS tool, Parameter --salt requires --iteration and vice versa
by Hynek Švábek (JIRA)
Hynek Švábek created ELY-1027:
---------------------------------
Summary: CS tool, Parameter --salt requires --iteration and vice versa
Key: ELY-1027
URL: https://issues.jboss.org/browse/ELY-1027
Project: WildFly Elytron
Issue Type: Bug
Reporter: Hynek Švábek
Assignee: Darran Lofthouse
If I use only one parameter from --salt or --iteration then this one is ignored and result password is in clear text.
{code}
java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret supersecretpassword --location="test.store" --uri "cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS" --password mycspassword --summary --salt="abcdefgh"
{code}
Result of this command is:
{code}
Alias "myalias" has been successfully stored
Credential store command summary:
--------------------------------------
/subsystem=elytron/credential-store=test:add(uri="cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS",relative-to=jboss.server.data.dir,credential-reference={clear-text="mycspassword"})
{code}
*There is expected error.*
Please add there this constraint: parameter --salt requires --iteration and vice versa
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (ELY-1027) CS tool, Parameter --salt requires --iteration and vice versa
by Hynek Švábek (JIRA)
[ https://issues.jboss.org/browse/ELY-1027?page=com.atlassian.jira.plugin.s... ]
Hynek Švábek updated ELY-1027:
------------------------------
Component/s: Command-Line Tool
> CS tool, Parameter --salt requires --iteration and vice versa
> -------------------------------------------------------------
>
> Key: ELY-1027
> URL: https://issues.jboss.org/browse/ELY-1027
> Project: WildFly Elytron
> Issue Type: Bug
> Components: Command-Line Tool
> Reporter: Hynek Švábek
> Assignee: Darran Lofthouse
>
> If I use only one parameter from --salt or --iteration then this one is ignored and result password is in clear text.
> {code}
> java -jar wildfly-elytron-tool.jar credential-store --add myalias --secret supersecretpassword --location="test.store" --uri "cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS" --password mycspassword --summary --salt="abcdefgh"
> {code}
> Result of this command is:
> {code}
> Alias "myalias" has been successfully stored
> Credential store command summary:
> --------------------------------------
> /subsystem=elytron/credential-store=test:add(uri="cr-store://test?modifiable=true;create=true;keyStoreType=JCEKS",relative-to=jboss.server.data.dir,credential-reference={clear-text="mycspassword"})
> {code}
> *There is expected error.*
> Please add there this constraint: parameter --salt requires --iteration and vice versa
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (WFLY-8446) Infinispan store=file resource needs capability references for path resolution
by Paul Ferraro (JIRA)
[ https://issues.jboss.org/browse/WFLY-8446?page=com.atlassian.jira.plugin.... ]
Paul Ferraro moved JBEAP-9881 to WFLY-8446:
-------------------------------------------
Project: WildFly (was: JBoss Enterprise Application Platform)
Key: WFLY-8446 (was: JBEAP-9881)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Clustering
(was: Clustering)
Affects Version/s: 10.1.0.Final
(was: 7.1.0.DR14)
> Infinispan store=file resource needs capability references for path resolution
> ------------------------------------------------------------------------------
>
> Key: WFLY-8446
> URL: https://issues.jboss.org/browse/WFLY-8446
> Project: WildFly
> Issue Type: Bug
> Components: Clustering
> Affects Versions: 10.1.0.Final
> Reporter: Paul Ferraro
> Assignee: Paul Ferraro
>
> Currently, one can create a file-store with an invalid relative-to path reference, which will not be discovered until runtime. This should be validated by the model via capability references.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (WFCORE-2575) Non file-based keystores used in ssl configuration don't allow to set key alias
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2575?page=com.atlassian.jira.plugi... ]
Darran Lofthouse updated WFCORE-2575:
-------------------------------------
Issue Type: Feature Request (was: Bug)
> Non file-based keystores used in ssl configuration don't allow to set key alias
> -------------------------------------------------------------------------------
>
> Key: WFCORE-2575
> URL: https://issues.jboss.org/browse/WFCORE-2575
> Project: WildFly Core
> Issue Type: Feature Request
> Components: Domain Management, Security
> Reporter: Josef Cacek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> Management model for SSL in security realms allows to configure alias to be used for the keystore. Neverhteless this configuration doesn't work for non-file-based keystores.
> E.g.
> {code:xml}
> <ssl>
> <keystore provider="custodia-cli"
> alias="server-ssl" keystore-password="thepassword" />
> </ssl>
> {code}
> The problem is probably in {{ProviderKeyManagerService}} class which has no evidence about the alias.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (WFCORE-2575) Non file-based keystores used in ssl configuration don't allow to set key alias
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2575?page=com.atlassian.jira.plugi... ]
Darran Lofthouse reassigned WFCORE-2575:
----------------------------------------
Assignee: Darran Lofthouse (was: Brian Stansberry)
> Non file-based keystores used in ssl configuration don't allow to set key alias
> -------------------------------------------------------------------------------
>
> Key: WFCORE-2575
> URL: https://issues.jboss.org/browse/WFCORE-2575
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management, Security
> Reporter: Josef Cacek
> Assignee: Darran Lofthouse
> Priority: Critical
>
> Management model for SSL in security realms allows to configure alias to be used for the keystore. Neverhteless this configuration doesn't work for non-file-based keystores.
> E.g.
> {code:xml}
> <ssl>
> <keystore provider="custodia-cli"
> alias="server-ssl" keystore-password="thepassword" />
> </ssl>
> {code}
> The problem is probably in {{ProviderKeyManagerService}} class which has no evidence about the alias.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (WFCORE-2575) Non file-based keystores used in ssl configuration don't allow to set key alias
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2575?page=com.atlassian.jira.plugi... ]
Darran Lofthouse moved WFLY-8445 to WFCORE-2575:
------------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2575 (was: WFLY-8445)
Component/s: Domain Management
Security
(was: Domain Management)
(was: Security)
> Non file-based keystores used in ssl configuration don't allow to set key alias
> -------------------------------------------------------------------------------
>
> Key: WFCORE-2575
> URL: https://issues.jboss.org/browse/WFCORE-2575
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management, Security
> Reporter: Josef Cacek
> Assignee: Brian Stansberry
> Priority: Critical
>
> Management model for SSL in security realms allows to configure alias to be used for the keystore. Neverhteless this configuration doesn't work for non-file-based keystores.
> E.g.
> {code:xml}
> <ssl>
> <keystore provider="custodia-cli"
> alias="server-ssl" keystore-password="thepassword" />
> </ssl>
> {code}
> The problem is probably in {{ProviderKeyManagerService}} class which has no evidence about the alias.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month