June 2019 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFCORE-4549) Update wildfly-openssl from 1.0.6.Final to 1.0.7.Final

by Brian Stansberry (Jira)

[ https://issues.jboss.org/browse/WFCORE-4549?page=com.atlassian.jira.plugi... ] Brian Stansberry moved WFLY-12240 to WFCORE-4549: ------------------------------------------------- Project: WildFly Core (was: WildFly) Key: WFCORE-4549 (was: WFLY-12240) Component/s: Server (was: Web (Undertow)) > Update wildfly-openssl from 1.0.6.Final to 1.0.7.Final > ------------------------------------------------------ > > Key: WFCORE-4549 > URL: https://issues.jboss.org/browse/WFCORE-4549 > Project: WildFly Core > Issue Type: Component Upgrade > Components: Server > Reporter: Ingo Weiss > Assignee: Flavia Rainone > Priority: Major > > Diff: https://github.com/wildfly/wildfly-openssl/compare/1.0.6.Final...1.0.7.Final -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (JBJCA-1389) NullPointerException raised when calling isWrapperFor(...) on a closed connection

by Tomas Hofman (Jira)

[ https://issues.jboss.org/browse/JBJCA-1389?page=com.atlassian.jira.plugin... ] Tomas Hofman reassigned JBJCA-1389: ----------------------------------- Assignee: Tomas Hofman > NullPointerException raised when calling isWrapperFor(...) on a closed connection > --------------------------------------------------------------------------------- > > Key: JBJCA-1389 > URL: https://issues.jboss.org/browse/JBJCA-1389 > Project: IronJacamar > Issue Type: Bug > Components: JDBC > Affects Versions: 1.4.9 > Reporter: Stephen Fikes > Assignee: Tomas Hofman > Priority: Major > > When calling {{Connection.isWrapperFor(...)}} on a connection which has been closed (i.e. returned to the pool, managed connection disassociated) previously, a {{NullPointerException}} is raised. The exception should be "Connection is not associated with a managed connection: ..." > {code} > ... java.lang.NullPointerException > at org.jboss.jca.adapters.jdbc.WrappedConnection.getWrappedObject(WrappedConnection.java:1914) > at org.jboss.jca.adapters.jdbc.WrappedConnection.getWrappedObject(WrappedConnection.java:64) > at org.jboss.jca.adapters.jdbc.JBossWrapper.isWrapperFor(JBossWrapper.java:68) > {code} > The NPE obscures the usage issue. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (JBJCA-1389) NullPointerException raised when calling isWrapperFor(...) on a closed connection

by Tomas Hofman (Jira)

[ https://issues.jboss.org/browse/JBJCA-1389?page=com.atlassian.jira.plugin... ] Tomas Hofman commented on JBJCA-1389: ------------------------------------- Proposed PR: https://github.com/ironjacamar/ironjacamar/pull/686 > NullPointerException raised when calling isWrapperFor(...) on a closed connection > --------------------------------------------------------------------------------- > > Key: JBJCA-1389 > URL: https://issues.jboss.org/browse/JBJCA-1389 > Project: IronJacamar > Issue Type: Bug > Components: JDBC > Affects Versions: 1.4.9 > Reporter: Stephen Fikes > Assignee: Tomas Hofman > Priority: Major > > When calling {{Connection.isWrapperFor(...)}} on a connection which has been closed (i.e. returned to the pool, managed connection disassociated) previously, a {{NullPointerException}} is raised. The exception should be "Connection is not associated with a managed connection: ..." > {code} > ... java.lang.NullPointerException > at org.jboss.jca.adapters.jdbc.WrappedConnection.getWrappedObject(WrappedConnection.java:1914) > at org.jboss.jca.adapters.jdbc.WrappedConnection.getWrappedObject(WrappedConnection.java:64) > at org.jboss.jca.adapters.jdbc.JBossWrapper.isWrapperFor(JBossWrapper.java:68) > {code} > The NPE obscures the usage issue. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-867) Masked password support cryptography usage

by Ashley Abdel-Sayed (Jira)

[ https://issues.jboss.org/browse/ELY-867?page=com.atlassian.jira.plugin.sy... ] Ashley Abdel-Sayed updated ELY-867: ----------------------------------- Git Pull Request: https://github.com/wildfly-security/wildfly-elytron/pull/1297 (was: https://github.com/wildfly-security/wildfly-elytron/pull/1134) > Masked password support cryptography usage > ------------------------------------------ > > Key: ELY-867 > URL: https://issues.jboss.org/browse/ELY-867 > Project: WildFly Elytron > Issue Type: Bug > Components: Passwords > Reporter: Zoran Regvart > Assignee: Ashley Abdel-Sayed > Priority: Major > > I encountered couple of issues with cryptography used for password masking: > * implementation of masked passwords drops initialization vector (IV) randomly generated by the {{javax.crypto.Cipher}} which makes unmasking (decryption) impossible. > * the implementation is using the same algorithm for key derivation and encryption, which is not possible as there is no encryption support in {{javax.crypto.Cipher}} for PKDBF2 family of algorithms, they are supported only in {{javax.crypto.SecretKeyFactory}} -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-816) Support for masked passwords in client XML config

by Ashley Abdel-Sayed (Jira)

[ https://issues.jboss.org/browse/ELY-816?page=com.atlassian.jira.plugin.sy... ] Ashley Abdel-Sayed updated ELY-816: ----------------------------------- Git Pull Request: https://github.com/wildfly-security/wildfly-elytron/pull/1297 (was: https://github.com/wildfly-security/wildfly-elytron/pull/1134) > Support for masked passwords in client XML config > ------------------------------------------------- > > Key: ELY-816 > URL: https://issues.jboss.org/browse/ELY-816 > Project: WildFly Elytron > Issue Type: Task > Reporter: David Lloyd > Assignee: Ashley Abdel-Sayed > Priority: Critical > Fix For: 1.10.0.CR3 > > > We need a way to support masked passwords in the auth configuration file, either as: > * A dedicated masked-password-type XML type > * Adding necessary fields to hashed-password-type > * Adding a modular crypt format > Needs to be supported anywhere passwords are allowed. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (WFLY-12241) Add documentation for masked passwords in client XML config

by Ashley Abdel-Sayed (Jira)

[ https://issues.jboss.org/browse/WFLY-12241?page=com.atlassian.jira.plugin... ] Ashley Abdel-Sayed updated WFLY-12241: -------------------------------------- Git Pull Request: https://github.com/wildfly/wildfly/pull/12387 (was: https://github.com/wildfly-security/wildfly-elytron/pull/1134) > Add documentation for masked passwords in client XML config > ----------------------------------------------------------- > > Key: WFLY-12241 > URL: https://issues.jboss.org/browse/WFLY-12241 > Project: WildFly > Issue Type: Task > Reporter: Ashley Abdel-Sayed > Assignee: Ashley Abdel-Sayed > Priority: Critical > > We need a way to support masked passwords in the auth configuration file, either as: > * A dedicated masked-password-type XML type > * Adding necessary fields to hashed-password-type > * Adding a modular crypt format > Needs to be supported anywhere passwords are allowed. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1834) Add support for missing MP-JWT requirements

by Martin Mazanek (Jira)

[ https://issues.jboss.org/browse/ELY-1834?page=com.atlassian.jira.plugin.s... ] Martin Mazanek updated ELY-1834: -------------------------------- Labels: (was: EAP-CD18) > Add support for missing MP-JWT requirements > ------------------------------------------- > > Key: ELY-1834 > URL: https://issues.jboss.org/browse/ELY-1834 > Project: WildFly Elytron > Issue Type: Feature Request > Reporter: Martin Mazanek > Assignee: Martin Mazanek > Priority: Major > > There are two main things that are currently missing: > * Support for injection of the currently authenticated caller as a {{JsonWebToken}} > * The {{java.security.Principal}} returned from {{javax.ws.rs.core.SecurityContext.getUserPrincipal()}} must be an instance of {{org.eclipse.microprofile.jwt.JsonWebToken}} > More details can be found [here|https://www.eclipse.org/community/eclipse_newsletter/2017/september/...]. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (ELY-1835) Add documentation for masked passwords in client XML config

by Ashley Abdel-Sayed (Jira)

Ashley Abdel-Sayed created ELY-1835: --------------------------------------- Summary: Add documentation for masked passwords in client XML config Key: ELY-1835 URL: https://issues.jboss.org/browse/ELY-1835 Project: WildFly Elytron Issue Type: Task Reporter: Ashley Abdel-Sayed Assignee: Ashley Abdel-Sayed Fix For: 1.10.0.CR3 We need a way to support masked passwords in the auth configuration file, either as: * A dedicated masked-password-type XML type * Adding necessary fields to hashed-password-type * Adding a modular crypt format Needs to be supported anywhere passwords are allowed. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (WFLY-12241) Add documentation for masked passwords in client XML config

by Ashley Abdel-Sayed (Jira)

[ https://issues.jboss.org/browse/WFLY-12241?page=com.atlassian.jira.plugin... ] Ashley Abdel-Sayed moved ELY-1835 to WFLY-12241: ------------------------------------------------ Project: WildFly (was: WildFly Elytron) Key: WFLY-12241 (was: ELY-1835) Fix Version/s: (was: 1.10.0.CR3) > Add documentation for masked passwords in client XML config > ----------------------------------------------------------- > > Key: WFLY-12241 > URL: https://issues.jboss.org/browse/WFLY-12241 > Project: WildFly > Issue Type: Task > Reporter: Ashley Abdel-Sayed > Assignee: Ashley Abdel-Sayed > Priority: Critical > > We need a way to support masked passwords in the auth configuration file, either as: > * A dedicated masked-password-type XML type > * Adding necessary fields to hashed-password-type > * Adding a modular crypt format > Needs to be supported anywhere passwords are allowed. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-4548) Add support for missing MP-JWT requirements

by Martin Mazanek (Jira)

Martin Mazanek created WFCORE-4548: -------------------------------------- Summary: Add support for missing MP-JWT requirements Key: WFCORE-4548 URL: https://issues.jboss.org/browse/WFCORE-4548 Project: WildFly Core Issue Type: Feature Request Components: Security Reporter: Martin Mazanek Assignee: Martin Mazanek Fix For: 10.0.0.Beta1 There are two main things that are currently missing: * Support for injection of the currently authenticated caller as a {{JsonWebToken}} * The {{java.security.Principal}} returned from {{javax.ws.rs.core.SecurityContext.getUserPrincipal()}} must be an instance of {{org.eclipse.microprofile.jwt.JsonWebToken}} More details can be found [here|https://www.eclipse.org/community/eclipse_newsletter/2017/september/...]. -- This message was sent by Atlassian Jira (v7.12.1#712002)

6 years, 10 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira June 2019