[JBoss JIRA] (WFCORE-4391) Upgrade apacheds-all to 2.0.0-M24 for Elytron tests
by Farah Juma (Jira)
[ https://issues.jboss.org/browse/WFCORE-4391?page=com.atlassian.jira.plugi... ]
Farah Juma updated WFCORE-4391:
-------------------------------
Description: This upgrade is needed to avoid a race condition in Apache Directory Server that causes a hang in {{org.wildfly.extension.elytron.LdapTestCase}} with TLS 1.3. (was: This upgrade is needed to avoid a race condition in Apache Directory Server that occurs in {{org.wildfly.extension.elytron.LdapTestCase}} with TLS 1.3.)
> Upgrade apacheds-all to 2.0.0-M24 for Elytron tests
> ---------------------------------------------------
>
> Key: WFCORE-4391
> URL: https://issues.jboss.org/browse/WFCORE-4391
> Project: WildFly Core
> Issue Type: Component Upgrade
> Reporter: Farah Juma
> Assignee: Farah Juma
> Priority: Major
>
> This upgrade is needed to avoid a race condition in Apache Directory Server that causes a hang in {{org.wildfly.extension.elytron.LdapTestCase}} with TLS 1.3.
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 9 months
[JBoss JIRA] (WFWIP-158) Artemis 2.7.0 logs password for STOMP protocol in clear text in debug logs
by Justin Bertram (Jira)
[ https://issues.jboss.org/browse/WFWIP-158?page=com.atlassian.jira.plugin.... ]
Justin Bertram commented on WFWIP-158:
--------------------------------------
I'm not sure there's anything we can do about this from Artemis code since the logging is being done by {{org.apache.commons.beanutils.BeanUtils}}. I think this would need to be solved in configuration by setting {{org.apache.commons.beanutils}} to {{INFO}} or higher.
> Artemis 2.7.0 logs password for STOMP protocol in clear text in debug logs
> --------------------------------------------------------------------------
>
> Key: WFWIP-158
> URL: https://issues.jboss.org/browse/WFWIP-158
> Project: WildFly WIP
> Issue Type: Bug
> Components: Artemis
> Reporter: Miroslav Novak
> Assignee: Justin Bertram
> Priority: Major
>
> If TRACE log is enabled for {{org.apache.activemq.artemis}} then StompProtoco is logging password in clear text:
> {code}
> 13:48:06,488 DEBUG [org.apache.commons.beanutils.BeanUtils] (ServerService Thread Pool -- 86) BeanUtils.populate(org.apache.activemq.artemis.core.protocol.stomp.StompProtocolManager@2aa25516, {needClientAuth=tru
> e, trustStorePassword=hornetqexample, keyStorePassword=hornetqexample, port=6445, sslEnabled=true, host=127.0.0.1, trustStorePath=/home/hudson/hudson_workspace/workspace/eap-7.x-messaging-weekly-common-ssl/eap-t
> estsuite/jboss-hornetq-testsuite/tests-eap7/src/test/resources/org/jboss/qa/hornetq/test/transportprotocols/hornetq.example.truststore, keyStorePath=/home/hudson/hudson_workspace/workspace/eap-7.x-messaging-week
> ly-common-ssl/eap-testsuite/jboss-hornetq-testsuite/tests-eap7/src/test/resources/org/jboss/qa/hornetq/test/transportprotocols/hornetq.example.keystore})
> ...
> 13:48:06,488 TRACE [org.apache.commons.beanutils.BeanUtils] (ServerService Thread Pool -- 86) setProperty(org.apache.activemq.artemis.core.protocol.stomp.StompProtocolManager@2aa25516, trustStorePassword, horn
> etqexample)
> ...
> 13:48:06,489 TRACE [org.apache.commons.beanutils.BeanUtils] (ServerService Thread Pool -- 86) setProperty(org.apache.activemq.artemis.core.protocol.stomp.StompProtocolManager@2aa25516, keyStorePassword, hornet
> qexample)
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
5 years, 9 months