[JBoss JIRA] (ELY-341) PEM file format support
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/ELY-341?page=com.atlassian.jira.plugin.sy... ]
David Lloyd resolved ELY-341.
-----------------------------
Fix Version/s: 1.1.0.Beta10
(was: 1.2.0.Beta5)
Resolution: Done
We'll call this done for now. New JIRAs can be opened for additional support.
> PEM file format support
> -----------------------
>
> Key: ELY-341
> URL: https://issues.jboss.org/browse/ELY-341
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: KeyStores
> Reporter: David Lloyd
> Assignee: Pedro Igor
> Fix For: 1.1.0.Beta10
>
>
> We should add support for PEM formats for formats including (but not limited to):
> * X.509 Certificate
> * CSRs
> * CRLs
> * RSA and DSA Public and Private Keys
> * PKCS8 format Private Keys
> * DH parameters
> * ECDSA Public Key
> * EC Private Key
> * EC Parameters
> This API could be consumed by various utilities or by custom credential storage implementations.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months
[JBoss JIRA] (ELY-446) Additional fields on SecurityIdentity
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/ELY-446?page=com.atlassian.jira.plugin.sy... ]
David Lloyd resolved ELY-446.
-----------------------------
Fix Version/s: 1.1.0.Beta10
Assignee: David Lloyd
Resolution: Done
> Additional fields on SecurityIdentity
> -------------------------------------
>
> Key: ELY-446
> URL: https://issues.jboss.org/browse/ELY-446
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: API / SPI
> Reporter: David Lloyd
> Assignee: David Lloyd
> Fix For: 1.1.0.Beta10
>
>
> The following useful properties could be added to SecurityIdentity:
> * Identity creation time (the time when the identity itself is created, whether by login or by run-as)
> * Authentication information, including:
> ** Login timestamp (the time of the original authentication)
> ** Login mechanism & kind (SASL/HTTP/TLS etc.)
> ** Login protocol (HTTP/Remoting/etc.) incl. enclosing TLS information if any
> * Authentication identity information, including:
> ** Original authentication name
> ** Authentication forwarding credential(s)
> * Connection circumstances:
> ** Peer and local address
> ** Current invocation protocol
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months
[JBoss JIRA] (ELY-383) Update ServerAuthenticationContext to carry an identity from start to end
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/ELY-383?page=com.atlassian.jira.plugin.sy... ]
David Lloyd resolved ELY-383.
-----------------------------
Resolution: Done
> Update ServerAuthenticationContext to carry an identity from start to end
> -------------------------------------------------------------------------
>
> Key: ELY-383
> URL: https://issues.jboss.org/browse/ELY-383
> Project: WildFly Elytron
> Issue Type: Task
> Components: API / SPI
> Reporter: David Lloyd
> Assignee: David Lloyd
> Attachments: Blank Flowchart - ServerAuthenticationContext.png
>
>
> The {{ServerAuthenticationContext}} should capture the identity in force for its domain when it is constructed. Any authorization attempt should always apply to the current identity - either the captured identity, or whatever the last successfully authorized identity was in the context.
> The attached state diagram should accurately summarize how authorization identity flows through. Authentication identity is only available during the "NAME ASSIGNED" state; once authorization occurs, the authentication identity is no longer useful and is disposed.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months
[JBoss JIRA] (ELY-496) Support for JAAS Subject inclusion in SecurityIdentity (via PeerIdentity)
by David Lloyd (JIRA)
[ https://issues.jboss.org/browse/ELY-496?page=com.atlassian.jira.plugin.sy... ]
David Lloyd resolved ELY-496.
-----------------------------
Resolution: Rejected
I think it has become apparent that we don't actually need this capability.
> Support for JAAS Subject inclusion in SecurityIdentity (via PeerIdentity)
> -------------------------------------------------------------------------
>
> Key: ELY-496
> URL: https://issues.jboss.org/browse/ELY-496
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: API / SPI
> Reporter: David Lloyd
>
> We will probably need a way to configure a security domain to associate an legacy JAAS Subject to a SecurityIdentity. This would fit with the existing capabilities of associating a PeerIdentity to the SecurityIdentity, and transforming the SecurityIdentity.
> However the way that PeerIdentity performs associations is with a before and after call. We need to support another mechanism that can use e.g. a function to wrap, because the only way to associate a Subject in JAAS is to create an AccessControlContext with a SubjectDomainCombiner, and to associate an AccessControlContext one must use doPrivileged.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 7 months