November 2018 - jboss-jira - Jboss List Archives

[JBoss JIRA] (AG-102) Validate timeout attributes in configuration

by Luis Barreiro (Jira)

Luis Barreiro created AG-102: -------------------------------- Summary: Validate timeout attributes in configuration Key: AG-102 URL: https://issues.jboss.org/browse/AG-102 Project: Agroal Issue Type: Bug Components: api Affects Versions: 1.3 Reporter: Luis Barreiro Assignee: Luis Barreiro Fix For: 1.4 -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-1679) (7.1.z) SASL property com.sun.security.sasl.digest.utf8 does not behave as default when its default value is explicitely configured

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-1679?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse updated ELY-1679: ---------------------------------- Fix Version/s: 1.1.13.CR1 (was: 1.1.12.CR1) > (7.1.z) SASL property com.sun.security.sasl.digest.utf8 does not behave as default when its default value is explicitely configured > ----------------------------------------------------------------------------------------------------------------------------------- > > Key: ELY-1679 > URL: https://issues.jboss.org/browse/ELY-1679 > Project: WildFly Elytron > Issue Type: Bug > Affects Versions: 1.1.11.Final > Reporter: Jiri Ondrusek > Assignee: Jiri Ondrusek > Priority: Major > Fix For: 1.1.13.CR1 > > > SASL property *com.sun.security.sasl.digest.utf8* does not behave as default when its default value is explicitely configured. > When we ommit this explicit property setting then everything is fine. > This property is described here [1] and *true* is default value. Property is defined in wildfly-core project org.wildfly.security.sasl.WildFlySasl.USE_UTF8. > Here is how to set it [2]. > Please check Steps to Reproduce, there is how to update test. > [1] https://doc-stage.usersys.redhat.com/documentation/en-us/red_hat_jboss_en... > [2] https://doc-stage.usersys.redhat.com/documentation/en-us/red_hat_jboss_en... -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-1547) SPNEGO: missing negstat field in the first reply for expired token

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-1547?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse updated ELY-1547: ---------------------------------- Fix Version/s: 1.1.12.CR1 > SPNEGO: missing negstat field in the first reply for expired token > ------------------------------------------------------------------ > > Key: ELY-1547 > URL: https://issues.jboss.org/browse/ELY-1547 > Project: WildFly Elytron > Issue Type: Bug > Components: Authentication Mechanisms, HTTP > Affects Versions: 1.2.4.Final > Reporter: Jan Kalina > Assignee: Jan Kalina > Priority: Major > Fix For: 1.1.12.CR1, 1.3.1.Final, 1.4.0.Final > > > When the client sends an initial SPNEGO token with Kerberos as preferred mechanism and includes an invalid kerberos token, then client expects to see the {{WWW-Authenticate}} HTTP header with SPNEGO response {{negTokenResp[ negState = reject ]}}. > As stated in [SPNEGO specification|https://tools.ietf.org/html/rfc4178#section-4.2.2] negstat is required in first reply: > {code:borderStyle=dashed} > negState > ... > This field is REQUIRED in the first reply from the target, and is > OPTIONAL thereafter. When negState is absent, the actual state > should be inferred from the state of the negotiated mechanism > context. > {code} -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-386) Unable to create HTTPS connection when some opnessl cipher suite with DHE are used

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-386?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-386: --------------------------------- Fix Version/s: 1.1.12.CR1 > Unable to create HTTPS connection when some opnessl cipher suite with DHE are used > ---------------------------------------------------------------------------------- > > Key: ELY-386 > URL: https://issues.jboss.org/browse/ELY-386 > Project: WildFly Elytron > Issue Type: Bug > Components: SSL > Affects Versions: 1.0.2.Final > Environment: Oracle java 1.8.0_66 > Reporter: Martin Choma > Assignee: Jan Kalina > Priority: Major > Fix For: 1.1.12.CR1, 1.2.0.Beta3 > > > Can't configure OpenSSL cipher suites EXP-DHE-RSA-DES-CBC-SHA, DHE-RSA-DES-CBC-SHA, DHE-RSA-DES-CBC3-SHA, EXP-DHE-DSS-DES-CBC-SHA, DHE-DSS-CBC-SHA, DHE-DSS-DES-CBC3-SHA [1] for HTTPS connection. Seems like everlasting problem DHE vs. EDH [2] - these cipher suites don't work neither in EAP6. IMHO problem is in MechanismDatabase.properties, where these DHE cipher suite are mapped to openssl EDH cipher suite what contradict openssl documentation [1]: > {code} > SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA = alias:TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA > SSL_DHE_RSA_WITH_DES_CBC_SHA = alias:TLS_DHE_RSA_WITH_DES_CBC_SHA > SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA = alias:TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA > TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA = EXP-EDH-RSA-DES-CBC-SHA,DHE,RSA,DES,SHA1,SSLv3,true,EXP40,false,40,56 > TLS_DHE_RSA_WITH_DES_CBC_SHA = EDH-RSA-DES-CBC-SHA,DHE,RSA,DES,SHA1,SSLv3,false,LOW,false,56,56 > TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA = EDH-RSA-DES-CBC3-SHA,DHE,RSA,3DES,SHA1,SSLv3,false,HIGH,true,168,168 > SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA = EXP-EDH-DSS-DES-CBC-SHA,DHE,DSS,DES,SHA1,SSLv3,true,EXP40,false,40,56 > SSL_DHE_DSS_WITH_DES_CBC_SHA = EDH-DSS-DES-CBC-SHA,DHE,DSS,DES,SHA1,SSLv3,false,LOW,false,56,56 > SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA = EDH-DSS-DES-CBC3-SHA,DHE,DSS,3DES,SHA1,SSLv3,false,HIGH,true,168,168 > {code} > Note that MechanismDatabase.properties is inconsistent in mapping DHE cipher suites to openssl cipher suites, as there also exist couple of them which map DHE to DHE, for example > {code} > TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 = DHE-RSA-AES128-SHA256,DHE,RSA,AES128,SHA256,TLSv1.2,false,HIGH,true,128,128 > TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 = DHE-RSA-AES256-SHA256,DHE,RSA,AES256,SHA256,TLSv1.2,false,HIGH,true,256,256 > TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 = DHE-RSA-AES128-GCM-SHA256,DHE,RSA,AES128GCM,AEAD,TLSv1.2,false,HIGH,true,128,128 > TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 = DHE-RSA-AES256-GCM-SHA384,DHE,RSA,AES256GCM,AEAD,TLSv1.2,false,HIGH,true,256,256 > {code} > In MechanismDatabase.properties is also said that > ??Note that all EDH ciphers automatically get a DHE OpenSSL-style alias (and vice-versa)?? > I think this JIRA contradict this comment. > Last thing, based on [1] shouldn't be SSL_DHE_DSS_WITH_DES_CBC_SHA defined as > SSL_DHE_DSS_WITH_DES_CBC_SHA = DHE-DSS-CBC-SHA,DHE,DSS,DES,SHA1,SSLv3,false,LOW,false,56,56 > ? > [1] https://www.openssl.org/docs/manmaster/apps/ciphers.html#CIPHER-SUITE-NAMES > [2] https://bugzilla.redhat.com/show_bug.cgi?id=1123304 -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-1549) IBM JDK, SPNEGO + FORM; with invalid ticket 401 status code is returned

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-1549?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse updated ELY-1549: ---------------------------------- Fix Version/s: 1.1.12.CR1 > IBM JDK, SPNEGO + FORM; with invalid ticket 401 status code is returned > ----------------------------------------------------------------------- > > Key: ELY-1549 > URL: https://issues.jboss.org/browse/ELY-1549 > Project: WildFly Elytron > Issue Type: Bug > Components: Authentication Mechanisms, HTTP > Affects Versions: 1.2.4.Final > Reporter: Jan Kalina > Assignee: Jan Kalina > Priority: Major > Labels: ibm-java > Fix For: 1.1.12.CR1, 1.3.1.Final, 1.4.0.Final > > > Given SPNEGO + FORM authentication configuration. AND SPNEGO is SESSION,CONNECTION or default (SESSIN) scoped. And running on IBM java. > When invalid kerberos ticket is send > Then status code 401 is returned with http form. > There is agreement in such case SPNEGO+FORM 200 should return with form. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-1373) IBM JDK, SPNEGO + FORM; with invalid ticket 200 status code is returned

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-1373?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse updated ELY-1373: ---------------------------------- Fix Version/s: 1.1.12.CR1 > IBM JDK, SPNEGO + FORM; with invalid ticket 200 status code is returned > ----------------------------------------------------------------------- > > Key: ELY-1373 > URL: https://issues.jboss.org/browse/ELY-1373 > Project: WildFly Elytron > Issue Type: Bug > Components: Authentication Mechanisms > Affects Versions: 1.2.0.Beta3 > Reporter: Jan Kalina > Assignee: Jan Kalina > Priority: Major > Fix For: 1.1.12.CR1, 1.2.0.Beta9 > > > Given SPNEGO + FORM authentication configuration. And running on IBM java. > When invalid kerberos ticket is send > Then status code 200 is returned with http form. > While on Oracle JDK {{gssContext.isEstablished()}} returns true for invalid client ticket (negotiate with wrong domain JBOSS.COM), so SPNEGO mechanism sends bare challenge after failed authorization, on IBM JDK it returns false immediately, so mechanism fail without sending challenge - to be consistent should be send in both cases. -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-396) Undertow HTTPS listener does not accept EXPORT40 and EXPORT56 cipher strings

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-396?page=com.atlassian.jira.plugin.sy... ] Darran Lofthouse updated ELY-396: --------------------------------- Fix Version/s: 1.1.12.CR1 > Undertow HTTPS listener does not accept EXPORT40 and EXPORT56 cipher strings > ---------------------------------------------------------------------------- > > Key: ELY-396 > URL: https://issues.jboss.org/browse/ELY-396 > Project: WildFly Elytron > Issue Type: Bug > Components: SSL > Affects Versions: 1.0.2.Final > Reporter: Ondrej Kotek > Assignee: Jan Kalina > Priority: Minor > Fix For: 1.1.12.CR1, 1.2.0.Beta3 > > > Undertow HTTPS listener does not accept EXPORT40 and EXPORT56 cipher strings in enabled-cipher-suites attribute. They are accepted in EAP 6.4. > According to OpenSSL documentation [1], and according to Elytron documentation [2], the cipher strings should be accepted. > [1] https://www.openssl.org/docs/man1.0.2/apps/ciphers.html > [2] http://wildfly-security.github.io/wildfly-elytron/org/wildfly/security/ss... -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (ELY-1704) Release WildFly Elytron 1.1.12.Final

by Darran Lofthouse (Jira)

[ https://issues.jboss.org/browse/ELY-1704?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse resolved ELY-1704. ----------------------------------- Resolution: Done > Release WildFly Elytron 1.1.12.Final > ------------------------------------ > > Key: ELY-1704 > URL: https://issues.jboss.org/browse/ELY-1704 > Project: WildFly Elytron > Issue Type: Release > Reporter: Darran Lofthouse > Assignee: Darran Lofthouse > Priority: Major > Fix For: 1.1.12.CR1 > > -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (SWSQE-481) Update Kiali Test Mesh Job

by Guilherme Baufaker Rêgo (Jira)

[ https://issues.jboss.org/browse/SWSQE-481?page=com.atlassian.jira.plugin.... ] Guilherme Baufaker Rêgo resolved SWSQE-481. ------------------------------------------- Resolution: Done > Update Kiali Test Mesh Job > -------------------------- > > Key: SWSQE-481 > URL: https://issues.jboss.org/browse/SWSQE-481 > Project: Kiali QE > Issue Type: Sub-task > Reporter: Guilherme Baufaker Rêgo > Assignee: Guilherme Baufaker Rêgo > Priority: Major > > Kiali Test Mesh Job needs to have the option to install istioctl -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

[JBoss JIRA] (WFLY-11269) Clean up the jacorb subsystem dependency tree

by Brian Stansberry (Jira)

Brian Stansberry created WFLY-11269: --------------------------------------- Summary: Clean up the jacorb subsystem dependency tree Key: WFLY-11269 URL: https://issues.jboss.org/browse/WFLY-11269 Project: WildFly Issue Type: Sub-task Components: IIOP Reporter: Brian Stansberry Assignee: Brian Stansberry -- This message was sent by Atlassian Jira (v7.12.1#712002)

7 years, 8 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira November 2018