April 2017 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFCORE-1059) RestartParentResourceAdd/RemoveHandler should handle capability registration

by Tomaz Cerar (JIRA)

[ https://issues.jboss.org/browse/WFCORE-1059?page=com.atlassian.jira.plugi... ] Tomaz Cerar reassigned WFCORE-1059: ----------------------------------- Assignee: (was: Tomaz Cerar) > RestartParentResourceAdd/RemoveHandler should handle capability registration > ---------------------------------------------------------------------------- > > Key: WFCORE-1059 > URL: https://issues.jboss.org/browse/WFCORE-1059 > Project: WildFly Core > Issue Type: Bug > Components: Domain Management > Affects Versions: 2.0.0.CR6 > Reporter: Paul Ferraro > Fix For: 3.0.0.Beta14 > > > RestartParentResourceAddHandler and RestartParentResourceRemoveHandler do not extend the respective AbstractAddStepHandler and AbstractRemoveStepHandler base classes, and thus does not handle capability [un]registration. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFLY-8312) Unable to read-resource when application-security-domain is either defined or required

by Tomaz Cerar (JIRA)

[ https://issues.jboss.org/browse/WFLY-8312?page=com.atlassian.jira.plugin.... ] Tomaz Cerar reassigned WFLY-8312: --------------------------------- Assignee: Tomaz Cerar (was: Jason Greene) > Unable to read-resource when application-security-domain is either defined or required > -------------------------------------------------------------------------------------- > > Key: WFLY-8312 > URL: https://issues.jboss.org/browse/WFLY-8312 > Project: WildFly > Issue Type: Bug > Reporter: Bartosz Baranowski > Assignee: Tomaz Cerar > Fix For: 11.0.0.Beta1 > > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFLY-8312) Unable to read-resource when application-security-domain is either defined or required

by Tomaz Cerar (JIRA)

[ https://issues.jboss.org/browse/WFLY-8312?page=com.atlassian.jira.plugin.... ] Tomaz Cerar resolved WFLY-8312. ------------------------------- Fix Version/s: 11.0.0.Beta1 Resolution: Done > Unable to read-resource when application-security-domain is either defined or required > -------------------------------------------------------------------------------------- > > Key: WFLY-8312 > URL: https://issues.jboss.org/browse/WFLY-8312 > Project: WildFly > Issue Type: Bug > Reporter: Bartosz Baranowski > Assignee: Tomaz Cerar > Fix For: 11.0.0.Beta1 > > -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (ELY-815) CredentialStore must have possibility get credentials from another CredentialStore

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/ELY-815?page=com.atlassian.jira.plugin.sy... ] Hynek Švábek resolved ELY-815. ------------------------------ Resolution: Done It was already fixed. > CredentialStore must have possibility get credentials from another CredentialStore > ---------------------------------------------------------------------------------- > > Key: ELY-815 > URL: https://issues.jboss.org/browse/ELY-815 > Project: WildFly Elytron > Issue Type: Bug > Components: Credential Store > Reporter: Hynek Švábek > Assignee: Peter Skopek > Priority: Blocker > > CredentialStore must have possibility get credentials from another CredentialStore. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2411) CS with {CMD} or {EXT} pass doesn't persist type=COMMAND to configuration -> after reload it doesn't work.

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2411?page=com.atlassian.jira.plugi... ] Hynek Švábek resolved WFCORE-2411. ---------------------------------- Resolution: Done It was already fixed. > CS with {CMD} or {EXT} pass doesn't persist type=COMMAND to configuration -> after reload it doesn't work. > ---------------------------------------------------------------------------------------------------------- > > Key: WFCORE-2411 > URL: https://issues.jboss.org/browse/WFCORE-2411 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Hynek Švábek > Assignee: Peter Skopek > Priority: Blocker > > This issue blocks verification of this RFE https://issues.jboss.org/browse/EAP7-533. > CS with {CMD} or {EXT} pass doesn't persist type=COMMAND to configuration -> after reload it doesn't work. > You can try it by this command (you must replace path to some real file. > /subsystem=elytron/credential-store=CredStoreCMD:add(uri="cr-store://test/cs444.jceks", credential-reference={type=COMMAND, clear-text="{CMD}/real/path/to/pass-ely.sh"}) > Once the command is successful executed: > # stop the server (not necessary) > # check standalone.xml > Given CredentialStore is persisted without attribute *type="COMMAND"* -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2395) There is NoSuchProviderException when we want to create our custom credential store.

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2395?page=com.atlassian.jira.plugi... ] Hynek Švábek resolved WFCORE-2395. ---------------------------------- Resolution: Cannot Reproduce Bug Wrong configuration, for details see comments on JBEAP jira. > There is NoSuchProviderException when we want to create our custom credential store. > ------------------------------------------------------------------------------------ > > Key: WFCORE-2395 > URL: https://issues.jboss.org/browse/WFCORE-2395 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Hynek Švábek > Assignee: Peter Skopek > > There is NoSuchProviderException when we want to create our custom credential store. > *How to reproduce* > # Create module > Set your own path to customcredstoreprovider.jar downloaded from attachment > {code} > module add --name=org.jboss.customcredstore --resources=/tmp/customcredstoreprovider.jar --dependencies=org.wildfly.security.elytron,org.wildfly.extension.elytron --slot=main > {code} > # Create provider loader > {code} > /subsystem=elytron/provider-loader=cust001:add(providers=[{class-names=[org.jboss.as.test.integration.security.credential.store.CustomElytronProvider],module=org.jboss.customcredstore,load-services=true}],register=true) > {code} > # Create credential store > {code} > /subsystem=elytron/credential-store=cs0123456:add(uri="cr-store://test/customcredCS123.jceks?create.storage=true", provider=org.jboss.as.test.integration.security.credential.store.CustomElytronProvider, provider-loader=cust001, credential-reference={clear-text=pass123}) > {code} > *And the result is:* > {code} > { > "outcome" => "failed", > "failure-description" => { > "WFLYCTL0080: Failed services" => {"org.wildfly.security.credential-store.cs0123456" => "org.jboss.msc.service.StartException in service org.wildfly.security.credential-store.cs0123456: WFLYELY00004: Unable to start the service. > Caused by: java.security.NoSuchProviderException: org.jboss.as.test.integration.security.credential.store.CustomElytronProvider"}, > "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.credential-store.cs0123456"], > "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined > }, > "rolled-back" => true > } > {code} -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2376) There isn't possibility disable create CS file from scratch

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2376?page=com.atlassian.jira.plugi... ] Hynek Švábek resolved WFCORE-2376. ---------------------------------- Resolution: Done It was already fixed. > There isn't possibility disable create CS file from scratch > ----------------------------------------------------------- > > Key: WFCORE-2376 > URL: https://issues.jboss.org/browse/WFCORE-2376 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Hynek Švábek > Assignee: Peter Skopek > Priority: Blocker > > There isn't possibility to disable create CS file from scratch. > Earlier we were able to set create.storage to true/false. > I can see problem in this scenario: > * I want to create new CS with path to existing CS file > * I fill wrong path > * Everything pass > But I want to use my CS file, not to create new one. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (ELY-836) CredentialStore resource name and CS alias in memory are case sensitive but CredentialStore aliases are persisted in lowercase.

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/ELY-836?page=com.atlassian.jira.plugin.sy... ] Hynek Švábek edited comment on ELY-836 at 4/5/17 7:23 AM: ---------------------------------------------------------- It was already fixed. was (Author: hsvabek): It was fixed yet. > CredentialStore resource name and CS alias in memory are case sensitive but CredentialStore aliases are persisted in lowercase. > ------------------------------------------------------------------------------------------------------------------------------- > > Key: ELY-836 > URL: https://issues.jboss.org/browse/ELY-836 > Project: WildFly Elytron > Issue Type: Bug > Components: Credential Store > Reporter: Hynek Švábek > Assignee: Peter Skopek > > CredentialStore resource name is case sensitive but CredentialStore alias is convert to lowercase. > *How to reproduce* > {code} > /subsystem=elytron/credential-store=csfile001:add(uri="cr-store://test/csfile001.jceks?store.password=pass123;create.storage=true") > {code} > {code} > /subsystem=elytron/credential-store=csfile001/alias=csname001:add(secret-value=secValue123456) > {code} > {code} > /subsystem=elytron/credential-store=csfile001/alias=csNAME001:add(secret-value=secValue987654) > {code} > In csfile001.jceks you can see only "csname001" entry. > *There is biggest problem that in memory are right case sensitive aliases and you can load them. But in backed CS file is only last one in lowercase.* > {code} > /subsystem=elytron/credential-store=csfile001/alias=csFF:add(secret-value=Elytron) > {code} > {code} > /subsystem=elytron/credential-store=csfile001/alias=csff:add(secret-value=ElytronWrong) > {code} > And now you can use both (csFF and csff) as CredStoreRef alias > e.g. > {code} > /subsystem=elytron/key-store=fireflyKS001:add(path=firefly.keystore,relative-to=jboss.server.data.dir,type=JKS,credential-reference= {store=csfile001,alias=csFF}) > {code} > Another big problem for me is that you have a lot of CS Alias RESOURCES which reference to ONE entry and update value in CS. > *NOTE* > https://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html > {code} > Whether aliases are case sensitive is implementation dependent. In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case. > {code} > *Suggestions for solution* > * We must unite case (in)sensitive between CS keystore file and CS in memory > * implement case sensitive (Our implementation looks ok, IMO there is another problem with it...) > * something else -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (ELY-820) CredentialStore is not able to create CS file which was deleted after server startup.

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/ELY-820?page=com.atlassian.jira.plugin.sy... ] Hynek Švábek resolved ELY-820. ------------------------------ Resolution: Done It was already fixed. > CredentialStore is not able to create CS file which was deleted after server startup. > ------------------------------------------------------------------------------------- > > Key: ELY-820 > URL: https://issues.jboss.org/browse/ELY-820 > Project: WildFly Elytron > Issue Type: Bug > Reporter: Hynek Švábek > Assignee: Peter Skopek > > CredentialStore is not able to create CS file which was deleted after server startup. > CS file is recreated only if create.storage is set to true. But this feature would work with create.storage too. > What do you think about it? > *How to reproduce:* > these steps are for creating CS file > /subsystem=elytron/credential-store=recreate001:add(uri="cr-store://test/recreate001.jceks?store.password=pass123;create.storage=true") > /subsystem=elytron/credential-store=recreate001/alias=alias001:add(secret-value=Elytron) > *Own reproducer:* > * /subsystem=elytron/credential-store=recreateCS:add(uri="cr-store://test/recreate001.jceks?store.password=pass123;create.storage=false") > * /subsystem=elytron/credential-store=recreateCS/alias=alias2:add(secret-value=Elytron123) > * *NOW* delete recreate001.jceks from filesystem > * /subsystem=elytron/credential-store=recreateCS/alias=alias3:add(secret-value=Elytron123) > * FAIL > {code} > { > "outcome" => "failed", > "failure-description" => "WFLYELY00009: Unable to complete operation. 'ELY09504: Cannot write storage file '/home/hsvabek/securityworkspace/VERIFICATION/CredentialStore_2016_09_14/jboss-eap-7.1.0.DR9/standalone/data/recreate001.jceks' for the store 'recreateCS''", > "rolled-back" => true > } > {code} > * https://github.com/wildfly-security/wildfly-elytron/blob/5f0ed115ea265240... -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

[JBoss JIRA] (ELY-836) CredentialStore resource name and CS alias in memory are case sensitive but CredentialStore aliases are persisted in lowercase.

by Hynek Švábek (JIRA)

[ https://issues.jboss.org/browse/ELY-836?page=com.atlassian.jira.plugin.sy... ] Hynek Švábek resolved ELY-836. ------------------------------ Resolution: Done It was fixed yet. > CredentialStore resource name and CS alias in memory are case sensitive but CredentialStore aliases are persisted in lowercase. > ------------------------------------------------------------------------------------------------------------------------------- > > Key: ELY-836 > URL: https://issues.jboss.org/browse/ELY-836 > Project: WildFly Elytron > Issue Type: Bug > Components: Credential Store > Reporter: Hynek Švábek > Assignee: Peter Skopek > > CredentialStore resource name is case sensitive but CredentialStore alias is convert to lowercase. > *How to reproduce* > {code} > /subsystem=elytron/credential-store=csfile001:add(uri="cr-store://test/csfile001.jceks?store.password=pass123;create.storage=true") > {code} > {code} > /subsystem=elytron/credential-store=csfile001/alias=csname001:add(secret-value=secValue123456) > {code} > {code} > /subsystem=elytron/credential-store=csfile001/alias=csNAME001:add(secret-value=secValue987654) > {code} > In csfile001.jceks you can see only "csname001" entry. > *There is biggest problem that in memory are right case sensitive aliases and you can load them. But in backed CS file is only last one in lowercase.* > {code} > /subsystem=elytron/credential-store=csfile001/alias=csFF:add(secret-value=Elytron) > {code} > {code} > /subsystem=elytron/credential-store=csfile001/alias=csff:add(secret-value=ElytronWrong) > {code} > And now you can use both (csFF and csff) as CredStoreRef alias > e.g. > {code} > /subsystem=elytron/key-store=fireflyKS001:add(path=firefly.keystore,relative-to=jboss.server.data.dir,type=JKS,credential-reference= {store=csfile001,alias=csFF}) > {code} > Another big problem for me is that you have a lot of CS Alias RESOURCES which reference to ONE entry and update value in CS. > *NOTE* > https://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html > {code} > Whether aliases are case sensitive is implementation dependent. In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case. > {code} > *Suggestions for solution* > * We must unite case (in)sensitive between CS keystore file and CS in memory > * implement case sensitive (Our implementation looks ok, IMO there is another problem with it...) > * something else -- This message was sent by Atlassian JIRA (v7.2.3#72005)

9 years, 3 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira April 2017