[JBoss JIRA] (ELY-783) alias-filter from Elytron key-store does not work for non-lower-case alias with JKS
by Yeray Borges (JIRA)
[ https://issues.jboss.org/browse/ELY-783?page=com.atlassian.jira.plugin.sy... ]
Yeray Borges reassigned ELY-783:
--------------------------------
Assignee: Yeray Borges (was: Darran Lofthouse)
> alias-filter from Elytron key-store does not work for non-lower-case alias with JKS
> -----------------------------------------------------------------------------------
>
> Key: ELY-783
> URL: https://issues.jboss.org/browse/ELY-783
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.1.0.Beta13
> Reporter: Ondrej Lukas
> Assignee: Yeray Borges
>
> In case when {{alias-filter}} attribute from Elytron {{key-store}} references non-lower-case alias (e.g. elytronAppServer) then SSL is not working. In case when this alias is set to lower-case in alias-filter (e.g. elytronappserver), then SSL works correctly.
> It seems JKS always transforms aliases to lower-case (even if they are created with some upper-case characters). However legacy security solution was able to use alias filter with non-lower-case characters to assign key from JKS keystore (probably through some internal {{.toLowerCase()}}).
> In case it is intended to do not use alias-filter with some upper-case for JKS then this issue can be changed to documentation issue. This is different behavior than was provided by legacy solution.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8768) mod_cluster excluded-contexts doesn't exclude slash prefixed /contexts; should perform normalization
by Radoslav Husar (JIRA)
[ https://issues.jboss.org/browse/WFLY-8768?page=com.atlassian.jira.plugin.... ]
Radoslav Husar updated WFLY-8768:
---------------------------------
Description:
Test instructions:
{noformat}
[rhusar@syrah wildfly-11.0.0.Beta1-SNAPSHOT]$ ./bin/jboss-cli.sh -c
[standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:/clusterbench"
{"outcome" => "success"}
[standalone@localhost:9990 /] :reload
{
"outcome" => "success",
"result" => undefined
}
[standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
{
"outcome" => "success",
"result" => [
"localhost:9090",
"Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 73
Vhost: [1:1:1], Alias: localhost
Vhost: [1:1:2], Alias: default-host
Context: [1:1:1], Context: /wildfly-services, Status: ENABLED
Context: [1:1:2], Context: /clusterbench-passivating, Status: ENABLED
Context: [1:1:3], Context: /tmp, Status: ENABLED
Context: [1:1:4], Context: /, Status: ENABLED
Context: [1:1:5], Context: /clusterbench, Status: ENABLED
"
]
}
[standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:clusterbench"
{
"outcome" => "success",
"response-headers" => {
"operation-requires-reload" => true,
"process-state" => "reload-required"
}
}
[standalone@localhost:9990 /] :reload
{
"outcome" => "success",
"result" => undefined
}
[standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
{
"outcome" => "success",
"result" => [
"localhost:9090",
"Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 69
Vhost: [1:1:1], Alias: localhost
Vhost: [1:1:2], Alias: default-host
Context: [1:1:2], Context: /tmp, Status: ENABLED
Context: [1:1:3], Context: /clusterbench-passivating, Status: ENABLED
Context: [1:1:4], Context: /wildfly-services, Status: ENABLED
Context: [1:1:5], Context: /, Status: ENABLED
"
]
}
{noformat}
was:
Steps:
{noformat}
[rhusar@syrah wildfly-11.0.0.Beta1-SNAPSHOT]$ ./bin/jboss-cli.sh -c
[standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:/clusterbench"
{"outcome" => "success"}
[standalone@localhost:9990 /] :reload
{
"outcome" => "success",
"result" => undefined
}
[standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
{
"outcome" => "success",
"result" => [
"localhost:9090",
"Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 73
Vhost: [1:1:1], Alias: localhost
Vhost: [1:1:2], Alias: default-host
Context: [1:1:1], Context: /wildfly-services, Status: ENABLED
Context: [1:1:2], Context: /clusterbench-passivating, Status: ENABLED
Context: [1:1:3], Context: /tmp, Status: ENABLED
Context: [1:1:4], Context: /, Status: ENABLED
Context: [1:1:5], Context: /clusterbench, Status: ENABLED
"
]
}
[standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:clusterbench"
{
"outcome" => "success",
"response-headers" => {
"operation-requires-reload" => true,
"process-state" => "reload-required"
}
}
[standalone@localhost:9990 /] :reload
{
"outcome" => "success",
"result" => undefined
}
[standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
{
"outcome" => "success",
"result" => [
"localhost:9090",
"Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 69
Vhost: [1:1:1], Alias: localhost
Vhost: [1:1:2], Alias: default-host
Context: [1:1:2], Context: /tmp, Status: ENABLED
Context: [1:1:3], Context: /clusterbench-passivating, Status: ENABLED
Context: [1:1:4], Context: /wildfly-services, Status: ENABLED
Context: [1:1:5], Context: /, Status: ENABLED
"
]
}
{noformat}
> mod_cluster excluded-contexts doesn't exclude slash prefixed /contexts; should perform normalization
> ----------------------------------------------------------------------------------------------------
>
> Key: WFLY-8768
> URL: https://issues.jboss.org/browse/WFLY-8768
> Project: WildFly
> Issue Type: Bug
> Components: mod_cluster
> Affects Versions: 11.0.0.Alpha1
> Reporter: Radoslav Husar
> Assignee: Radoslav Husar
>
> Test instructions:
> {noformat}
> [rhusar@syrah wildfly-11.0.0.Beta1-SNAPSHOT]$ ./bin/jboss-cli.sh -c
> [standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:/clusterbench"
> {"outcome" => "success"}
> [standalone@localhost:9990 /] :reload
> {
> "outcome" => "success",
> "result" => undefined
> }
> [standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
> {
> "outcome" => "success",
> "result" => [
> "localhost:9090",
> "Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 73
> Vhost: [1:1:1], Alias: localhost
> Vhost: [1:1:2], Alias: default-host
> Context: [1:1:1], Context: /wildfly-services, Status: ENABLED
> Context: [1:1:2], Context: /clusterbench-passivating, Status: ENABLED
> Context: [1:1:3], Context: /tmp, Status: ENABLED
> Context: [1:1:4], Context: /, Status: ENABLED
> Context: [1:1:5], Context: /clusterbench, Status: ENABLED
> "
> ]
> }
> [standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:clusterbench"
> {
> "outcome" => "success",
> "response-headers" => {
> "operation-requires-reload" => true,
> "process-state" => "reload-required"
> }
> }
> [standalone@localhost:9990 /] :reload
> {
> "outcome" => "success",
> "result" => undefined
> }
> [standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
> {
> "outcome" => "success",
> "result" => [
> "localhost:9090",
> "Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 69
> Vhost: [1:1:1], Alias: localhost
> Vhost: [1:1:2], Alias: default-host
> Context: [1:1:2], Context: /tmp, Status: ENABLED
> Context: [1:1:3], Context: /clusterbench-passivating, Status: ENABLED
> Context: [1:1:4], Context: /wildfly-services, Status: ENABLED
> Context: [1:1:5], Context: /, Status: ENABLED
> "
> ]
> }
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFLY-8768) mod_cluster excluded-contexts doesn't exclude slash prefixed /contexts; should perform normalization
by Radoslav Husar (JIRA)
[ https://issues.jboss.org/browse/WFLY-8768?page=com.atlassian.jira.plugin.... ]
Radoslav Husar updated WFLY-8768:
---------------------------------
Description:
Steps:
{noformat}
[rhusar@syrah wildfly-11.0.0.Beta1-SNAPSHOT]$ ./bin/jboss-cli.sh -c
[standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:/clusterbench"
{"outcome" => "success"}
[standalone@localhost:9990 /] :reload
{
"outcome" => "success",
"result" => undefined
}
[standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
{
"outcome" => "success",
"result" => [
"localhost:9090",
"Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 73
Vhost: [1:1:1], Alias: localhost
Vhost: [1:1:2], Alias: default-host
Context: [1:1:1], Context: /wildfly-services, Status: ENABLED
Context: [1:1:2], Context: /clusterbench-passivating, Status: ENABLED
Context: [1:1:3], Context: /tmp, Status: ENABLED
Context: [1:1:4], Context: /, Status: ENABLED
Context: [1:1:5], Context: /clusterbench, Status: ENABLED
"
]
}
[standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:clusterbench"
{
"outcome" => "success",
"response-headers" => {
"operation-requires-reload" => true,
"process-state" => "reload-required"
}
}
[standalone@localhost:9990 /] :reload
{
"outcome" => "success",
"result" => undefined
}
[standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
{
"outcome" => "success",
"result" => [
"localhost:9090",
"Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 69
Vhost: [1:1:1], Alias: localhost
Vhost: [1:1:2], Alias: default-host
Context: [1:1:2], Context: /tmp, Status: ENABLED
Context: [1:1:3], Context: /clusterbench-passivating, Status: ENABLED
Context: [1:1:4], Context: /wildfly-services, Status: ENABLED
Context: [1:1:5], Context: /, Status: ENABLED
"
]
}
{noformat}
> mod_cluster excluded-contexts doesn't exclude slash prefixed /contexts; should perform normalization
> ----------------------------------------------------------------------------------------------------
>
> Key: WFLY-8768
> URL: https://issues.jboss.org/browse/WFLY-8768
> Project: WildFly
> Issue Type: Bug
> Components: mod_cluster
> Affects Versions: 11.0.0.Alpha1
> Reporter: Radoslav Husar
> Assignee: Radoslav Husar
>
> Steps:
> {noformat}
> [rhusar@syrah wildfly-11.0.0.Beta1-SNAPSHOT]$ ./bin/jboss-cli.sh -c
> [standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:/clusterbench"
> {"outcome" => "success"}
> [standalone@localhost:9990 /] :reload
> {
> "outcome" => "success",
> "result" => undefined
> }
> [standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
> {
> "outcome" => "success",
> "result" => [
> "localhost:9090",
> "Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 73
> Vhost: [1:1:1], Alias: localhost
> Vhost: [1:1:2], Alias: default-host
> Context: [1:1:1], Context: /wildfly-services, Status: ENABLED
> Context: [1:1:2], Context: /clusterbench-passivating, Status: ENABLED
> Context: [1:1:3], Context: /tmp, Status: ENABLED
> Context: [1:1:4], Context: /, Status: ENABLED
> Context: [1:1:5], Context: /clusterbench, Status: ENABLED
> "
> ]
> }
> [standalone@localhost:9990 /] /subsystem=modcluster/mod-cluster-config=configuration:write-attribute(name=excluded-contexts,value="default-host:clusterbench"
> {
> "outcome" => "success",
> "response-headers" => {
> "operation-requires-reload" => true,
> "process-state" => "reload-required"
> }
> }
> [standalone@localhost:9990 /] :reload
> {
> "outcome" => "success",
> "result" => undefined
> }
> [standalone@localhost:9990 /] /subsystem=modcluster/:read-proxies-info
> {
> "outcome" => "success",
> "result" => [
> "localhost:9090",
> "Node: [1],Name: node1,Balancer: mycluster,LBGroup: ,Host: 127.0.0.1,Port: 8009,Type: ajp,Flushpackets: Off,Flushwait: 10,Ping: 10,Smax: 26,Ttl: 60,Elected: 0,Read: 0,Transfered: 0,Connected: 0,Load: 69
> Vhost: [1:1:1], Alias: localhost
> Vhost: [1:1:2], Alias: default-host
> Context: [1:1:2], Context: /tmp, Status: ENABLED
> Context: [1:1:3], Context: /clusterbench-passivating, Status: ENABLED
> Context: [1:1:4], Context: /wildfly-services, Status: ENABLED
> Context: [1:1:5], Context: /, Status: ENABLED
> "
> ]
> }
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFCORE-2805) Use Xalan from JRE rather than our own fork
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2805?page=com.atlassian.jira.plugi... ]
David Lloyd commented on WFCORE-2805:
-------------------------------------
I think this will suffer from the same problems as all the other JAXP module replacement ideas, namely that class loading is done poorly and/or static and global or per-TCCL provider replacement is not possible or does not function correctly.
The following JBoss-maintained APIs and their implementations are not replaceable for the same reason:
* {{javax.xml.datatype.DatatypeFactory}}
* {{javax.xml.parsers.DocumentBuilderFactory}}
* {{javax.xml.parsers.SAXParserFactory}}
* {{javax.xml.validation.SchemaFactory}}
* {{javax.xml.transform.sax.SAXTransformerFactory}}
* {{javax.xml.stream.XMLEventFactory}}
* {{javax.xml.stream.XMLInputFactory}}
* {{javax.xml.stream.XMLOutputFactory}}
* {{org.xml.sax.XMLReader}}
* {{javax.xml.xpath.XPathFactory}}
Java 9 *may* solve enough of the class loading problems that we use the JDK APIs, if not the implementations.
> Use Xalan from JRE rather than our own fork
> -------------------------------------------
>
> Key: WFCORE-2805
> URL: https://issues.jboss.org/browse/WFCORE-2805
> Project: WildFly Core
> Issue Type: Task
> Reporter: Peter Palaga
> Assignee: Peter Palaga
>
> As proposed by [~wolfc] we want to check if we can get rid of maintaining our own fork of Xalan.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months
[JBoss JIRA] (WFCORE-2620) Add ability to read computed runtime values of IO subsystem buffer-pool attributes
by Tomaz Cerar (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2620?page=com.atlassian.jira.plugi... ]
Tomaz Cerar commented on WFCORE-2620:
-------------------------------------
I don't think we need to expose IO subsystem buffer pools in jmx.
For calculation lets just do similar as we do for calculated values in workers. In this case it is even simpler as all read attribute handler needs to read value from model if defined, otherwise return default value.
Write operations are not supported beyond reload-required as we currently cannot change values of buffer pools dynamically.
> Add ability to read computed runtime values of IO subsystem buffer-pool attributes
> ----------------------------------------------------------------------------------
>
> Key: WFCORE-2620
> URL: https://issues.jboss.org/browse/WFCORE-2620
> Project: WildFly Core
> Issue Type: Enhancement
> Affects Versions: 3.0.0.Beta13
> Reporter: Romain Pelisse
> Assignee: Romain Pelisse
> Original Estimate: 2 days
> Remaining Estimate: 2 days
>
> In IO subsystem there are some attributes which are calculated based on available system resources if not explicitly specified. These attributes are:
> * worker
> ** io-threads
> ** task-max-threads
> * buffer-pool
> ** buffer-size
> ** buffers-per-slice
> ** direct-buffers
> Currently these computed values are not visible for user in the subsystem configuration even with include-runtime=true.
> To show these runtime values would definitely improve UX.
> Worker attributes are covered by EAP7-616 .
> This issue is about buffer-pool attributes.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 2 months