[JBoss JIRA] (WFCORE-5005) TlsTestCase#testReloadTrustManager fails on IBM Java 8
by Ondrej Kotek (Jira)
Ondrej Kotek created WFCORE-5005:
------------------------------------
Summary: TlsTestCase#testReloadTrustManager fails on IBM Java 8
Key: WFCORE-5005
URL: https://issues.redhat.com/browse/WFCORE-5005
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 13.0.0.Beta1
Reporter: Ondrej Kotek
TlsTestCase#testReloadTrustManager fails on IBM Java 8 at [TlsTestCase.java#L439|https://github.com/wildfly/wildfly-core/blob/master...] reporting the same DN. When I try to compare using canonical names, there is a difference. Using RFC1779 or RFC2253 names is ok.
{noformat}
Assert.assertEquals(originalFoundDN.getIssuerX500Principal().getName(X500Principal.CANONICAL), ISSUER_DN.getName(X500Principal.CANONICAL));
[ERROR] TlsTestCase.testReloadTrustManager:439 expected:<....2.840.113549.1.9.1=[#1613656c7974726f6e4077696c64666c792e6f7267],c=uk,st=elytron,cn=...> but was:<....2.840.113549.1.9.1=[elytron@wildfly.org],c=uk,st=elytron,cn=...>
{noformat}
Is it just a test issue, or can there be an impact on functionality? In case it's just a test issue, can we assert equality of names? I.e.
{noformat}
Assert.assertEquals(originalFoundDN.getIssuerX500Principal().getName(), ISSUER_DN.getName());
{noformat}
The same for [TlsTestCase.java#L465|https://github.com/wildfly/wildfly-core/blob/master...] then.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 1 month
[JBoss JIRA] (WFLY-13276) Galleon provisioning is failing intermittently on s390
by Yeray Borges Santana (Jira)
[ https://issues.redhat.com/browse/WFLY-13276?page=com.atlassian.jira.plugi... ]
Yeray Borges Santana commented on WFLY-13276:
---------------------------------------------
Just for the record, although we have already upgraded the WwildFly Galleon Plugins to 4.2.8.Final, we still need an upgrade of wildfly-core in WildFly to see the results in Team City.
> Galleon provisioning is failing intermittently on s390
> ------------------------------------------------------
>
> Key: WFLY-13276
> URL: https://issues.redhat.com/browse/WFLY-13276
> Project: WildFly
> Issue Type: Bug
> Components: Build System
> Reporter: Yeray Borges Santana
> Assignee: Yeray Borges Santana
> Priority: Major
> Attachments: provisioning-error.log
>
>
> It seems to be randomly between build and dist modules, but in s390 environment the builds fail with the following error:
> {noformat}
> org.jboss.galleon.ProvisioningException: Failed to generate host.xml on {
> [Step 3/4] "operation" => "composite",
> [Step 3/4] "address" => [],
> [Step 3/4] "rollback-on-runtime-failure" => true,
> [Step 3/4] "steps" => [
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"}
> [Step 3/4] ],
> [Step 3/4] "disallowed-providers" => ["OracleUcrypto"],
> [Step 3/4] "final-providers" => "combined-providers"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"provider-loader" => "elytron"}
> [Step 3/4] ],
> [Step 3/4] "module" => "org.wildfly.security.elytron"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"provider-loader" => "openssl"}
> [Step 3/4] ],
> [Step 3/4] "module" => "org.wildfly.openssl"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"aggregate-providers" => "combined-providers"}
> [Step 3/4] ],
> [Step 3/4] "providers" => [
> [Step 3/4] "elytron",
> [Step 3/4] "openssl"
> [Step 3/4] ]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"identity-realm" => "local"}
> [Step 3/4] ],
> [Step 3/4] "identity" => "$local"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"file-audit-log" => "local-audit"}
> [Step 3/4] ],
> [Step 3/4] "format" => "JSON",
> [Step 3/4] "path" => "audit.log",
> [Step 3/4] "relative-to" => "jboss.domain.log.dir"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"constant-realm-mapper" => "local"}
> [Step 3/4] ],
> [Step 3/4] "realm-name" => "local"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"provider-http-server-mechanism-factory" => "global"}
> [Step 3/4] ]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"simple-permission-mapper" => "default-permission-mapper"}
> [Step 3/4] ],
> [Step 3/4] "mapping-mode" => "first",
> [Step 3/4] "permission-mappings" => [
> [Step 3/4] {
> [Step 3/4] "principals" => ["anonymous"],
> [Step 3/4] "permission-sets" => [{"permission-set" => "default-permissions"}]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "match-all" => "true",
> [Step 3/4] "permission-sets" => [
> [Step 3/4] {"permission-set" => "login-permission"},
> [Step 3/4] {"permission-set" => "default-permissions"}
> [Step 3/4] ]
> [Step 3/4] }
> [Step 3/4] ]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"simple-role-decoder" => "groups-to-roles"}
> [Step 3/4] ],
> [Step 3/4] "attribute" => "groups"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"provider-sasl-server-factory" => "global"}
> [Step 3/4] ]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"mechanism-provider-filtering-sasl-server-factory" => "elytron"}
> [Step 3/4] ],
> [Step 3/4] "filters" => [{"provider-name" => "WildFlyElytron"}],
> [Step 3/4] "sasl-server-factory" => "global"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"configurable-sasl-server-factory" => "configured"}
> [Step 3/4] ],
> [Step 3/4] "properties" => {"wildfly.sasl.local-user.default-user" => "$local"},
> [Step 3/4] "sasl-server-factory" => "elytron"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"constant-role-mapper" => "super-user-mapper"}
> [Step 3/4] ],
> [Step 3/4] "roles" => ["SuperUser"]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"permission-set" => "login-permission"}
> [Step 3/4] ],
> [Step 3/4] "permissions" => [{"class-name" => "org.wildfly.security.auth.permission.LoginPermission"}]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"permission-set" => "default-permissions"}
> [Step 3/4] ],
> [Step 3/4] "permissions" => []
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"properties-realm" => "ManagementRealm"}
> [Step 3/4] ],
> [Step 3/4] "users-properties" => {
> [Step 3/4] "path" => "mgmt-users.properties",
> [Step 3/4] "relative-to" => "jboss.domain.config.dir",
> [Step 3/4] "digest-realm-name" => "ManagementRealm"
> [Step 3/4] }
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "write-attribute",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"properties-realm" => "ManagementRealm"}
> [Step 3/4] ],
> [Step 3/4] "name" => "groups-properties",
> [Step 3/4] "value" => {
> [Step 3/4] "path" => "mgmt-groups.properties",
> [Step 3/4] "relative-to" => "jboss.domain.config.dir"
> [Step 3/4] }
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"security-domain" => "ManagementDomain"}
> [Step 3/4] ],
> [Step 3/4] "default-realm" => "ManagementRealm",
> [Step 3/4] "permission-mapper" => "default-permission-mapper",
> [Step 3/4] "realms" => [
> [Step 3/4] {
> [Step 3/4] "realm" => "ManagementRealm",
> [Step 3/4] "role-decoder" => "groups-to-roles"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "realm" => "local",
> [Step 3/4] "role-mapper" => "super-user-mapper"
> [Step 3/4] }
> [Step 3/4] ]
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"sasl-authentication-factory" => "management-sasl-authentication"}
> [Step 3/4] ],
> [Step 3/4] "mechanism-configurations" => [
> [Step 3/4] {
> [Step 3/4] "mechanism-name" => "JBOSS-LOCAL-USER",
> [Step 3/4] "realm-mapper" => "local"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "mechanism-name" => "DIGEST-MD5",
> [Step 3/4] "mechanism-realm-configurations" => [{"realm-name" => "ManagementRealm"}]
> [Step 3/4] }
> [Step 3/4] ],
> [Step 3/4] "sasl-server-factory" => "configured",
> [Step 3/4] "security-domain" => "ManagementDomain"
> [Step 3/4] },
> [Step 3/4] {
> [Step 3/4] "operation" => "add",
> [Step 3/4] "address" => [
> [Step 3/4] {"host" => "master"},
> [Step 3/4] {"subsystem" => "elytron"},
> [Step 3/4] {"http-authentication-factory" => "management-http-authentication"}
> [Step 3/4] ],
> [Step 3/4] "http-server-mechanism-factory" => "global",
> [Step 3/4] "mechanism-configurations" => [{
> [Step 3/4] "mechanism-name" => "BASIC",
> [Step 3/4] "mechanism-realm-configurations" => [{"realm-name" => "Management Realm"}]
> [Step 3/4] }],
> [Step 3/4] "security-domain" => "ManagementDomain"
> [Step 3/4] }
> [Step 3/4] ]
> [Step 3/4] }: {"WFLYCTL0062: Composite operation failed and was rolled back. Steps that failed:" => {"Operation step-2" => {
> [Step 3/4] "WFLYCTL0412: Required services that are not installed:" => ["elytron.security-properties"],
> [Step 3/4] "WFLYCTL0180: Services with missing/unavailable dependencies" => ["org.wildfly.security.providers.elytron is missing [elytron.security-properties]"]
> [Step 3/4] }}}
> [Step 3/4] at org.wildfly.galleon.plugin.config.generator.WfConfigGenerator.doHandle(WfConfigGenerator.java:356)
> [Step 3/4] at org.wildfly.galleon.plugin.config.generator.WfConfigGenerator.endBatch(WfConfigGenerator.java:272)
> [Step 3/4] at org.wildfly.galleon.plugin.config.generator.WfConfigGenerator.executeScript(WfConfigGenerator.java:494)
> [Step 3/4] at org.wildfly.galleon.plugin.config.generator.WfConfigGenerator.forkedForEmbedded(WfConfigGenerator.java:471)
> [Step 3/4] at org.wildfly.galleon.plugin.server.ForkedEmbeddedUtil.main(ForkedEmbeddedUtil.java:208)
> [Step 3/4] [INFO] Overall Galleon provisioning took 27.115 seconds
> {noformat}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 1 month
[JBoss JIRA] (WFCORE-5004) TlsTestCase#testReloadTrustManager fails on IBM Java 8
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/WFCORE-5004?page=com.atlassian.jira.plug... ]
Darran Lofthouse reassigned WFCORE-5004:
----------------------------------------
Assignee: (was: Darran Lofthouse)
> TlsTestCase#testReloadTrustManager fails on IBM Java 8
> ------------------------------------------------------
>
> Key: WFCORE-5004
> URL: https://issues.redhat.com/browse/WFCORE-5004
> Project: WildFly Core
> Issue Type: Bug
> Components: Security
> Affects Versions: 13.0.0.Beta1
> Reporter: Ondrej Kotek
> Priority: Major
>
> TlsTestCase#testReloadTrustManager fails on IBM Java 8 at [TlsTestCase.java#L439|https://github.com/wildfly/wildfly-core/blob/master...] reporting the same DN. When I try to compare using canonical names, there is a difference. Using RFC1779 or RFC2253 names is ok.
> {noformat}
> Assert.assertEquals(originalFoundDN.getIssuerX500Principal().getName(X500Principal.CANONICAL), ISSUER_DN.getName(X500Principal.CANONICAL));
> [ERROR] TlsTestCase.testReloadTrustManager:439 expected:<....2.840.113549.1.9.1=[#1613656c7974726f6e4077696c64666c792e6f7267],c=uk,st=elytron,cn=...> but was:<....2.840.113549.1.9.1=[elytron@wildfly.org],c=uk,st=elytron,cn=...>
> {noformat}
> Is it just a test issue, or can there be an impact on functionality? In case it's just a test issue, can we assert equality of names? I.e.
> {noformat}
> Assert.assertEquals(originalFoundDN.getIssuerX500Principal().getName(), ISSUER_DN.getName());
> {noformat}
> The same for [TlsTestCase.java#L465|https://github.com/wildfly/wildfly-core/blob/master...] then.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 1 month
[JBoss JIRA] (WFCORE-5004) TlsTestCase#testReloadTrustManager fails on IBM Java 8
by Ondrej Kotek (Jira)
Ondrej Kotek created WFCORE-5004:
------------------------------------
Summary: TlsTestCase#testReloadTrustManager fails on IBM Java 8
Key: WFCORE-5004
URL: https://issues.redhat.com/browse/WFCORE-5004
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 13.0.0.Beta1
Reporter: Ondrej Kotek
Assignee: Darran Lofthouse
TlsTestCase#testReloadTrustManager fails on IBM Java 8 at [TlsTestCase.java#L439|https://github.com/wildfly/wildfly-core/blob/master...] reporting the same DN. When I try to compare using canonical names, there is a difference. Using RFC1779 or RFC2253 names is ok.
{noformat}
Assert.assertEquals(originalFoundDN.getIssuerX500Principal().getName(X500Principal.CANONICAL), ISSUER_DN.getName(X500Principal.CANONICAL));
[ERROR] TlsTestCase.testReloadTrustManager:439 expected:<....2.840.113549.1.9.1=[#1613656c7974726f6e4077696c64666c792e6f7267],c=uk,st=elytron,cn=...> but was:<....2.840.113549.1.9.1=[elytron@wildfly.org],c=uk,st=elytron,cn=...>
{noformat}
Is it just a test issue, or can there be an impact on functionality? In case it's just a test issue, can we assert equality of names? I.e.
{noformat}
Assert.assertEquals(originalFoundDN.getIssuerX500Principal().getName(), ISSUER_DN.getName());
{noformat}
The same for [TlsTestCase.java#L465|https://github.com/wildfly/wildfly-core/blob/master...] then.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 1 month
[JBoss JIRA] (ELY-1994) Ensure the Elytron build works on Java 14
by Darran Lofthouse (Jira)
Darran Lofthouse created ELY-1994:
-------------------------------------
Summary: Ensure the Elytron build works on Java 14
Key: ELY-1994
URL: https://issues.redhat.com/browse/ELY-1994
Project: WildFly Elytron
Issue Type: Task
Components: Testsuite
Reporter: Darran Lofthouse
Fix For: 1.13.0.CR2
Overall the build is not doing too badly and doesn't fail until we get to the main testsuite.
{code:java}
[INFO] WildFly Elytron - Tests ............................ FAILURE [ 1.447 s]
[INFO] WildFly Elytron .................................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 01:46 min
[INFO] Finished at: 2020-06-11T11:25:23+01:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:3.7.0-jboss-1:testCompile (default-testCompile) on project wildfly-elytron-tests: Compilation failure: Compilation failure:
[ERROR] /home/darranl/src/community/wildfly-elytron/tests/base/src/test/java/org/wildfly/security/auth/TestLoginModule.java:[31,25] package java.security.acl does not exist
[ERROR] /home/darranl/src/community/wildfly-elytron/tests/base/src/test/java/org/wildfly/security/auth/TestLoginModule.java:[107,40] cannot find symbol
[ERROR] symbol: class Group
[ERROR] location: class org.wildfly.security.auth.TestLoginModule
[ERROR] -> [Help 1] {code}
If this is all that is failing for us maybe we can revisit the test and see how appropriate it is and if it can be adapted to use available APIs.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 1 month
[JBoss JIRA] (WFLY-13471) Warn the ws deployment packaged with JAXP implementation
by Jim Ma (Jira)
[ https://issues.redhat.com/browse/WFLY-13471?page=com.atlassian.jira.plugi... ]
Jim Ma updated WFLY-13471:
--------------------------
Summary: Warn the ws deployment packaged with JAXP implementation (was: Fail the ws deployment packaged with JAXP implementation)
> Warn the ws deployment packaged with JAXP implementation
> --------------------------------------------------------
>
> Key: WFLY-13471
> URL: https://issues.redhat.com/browse/WFLY-13471
> Project: WildFly
> Issue Type: Bug
> Components: Web Services
> Affects Versions: 19.1.0.Final
> Reporter: Jim Ma
> Assignee: Jim Ma
> Priority: Major
> Fix For: 21.0.0.Beta1
>
>
> Deploy JAXWS application that packages an older JAXP implementation.
> Try to get the wsdl: wget http://localhost:8080/helloWorld?wsdl
> When the container is performing operations, it should use the container's JAXP implementation, else it could fail if the application is packaging a version that is not compatible.
> {code}
> 19:28:42,560 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: JBoss EAP 7.3.0.GA (WildFly Core 10.1.2.Final-redhat-00001) started in 4091ms - Started 426 of 652 services (374 services are lazy, passive or on-demand)
> 19:28:45,537 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /helloWorld: java.lang.AbstractMethodError: org.apache.xerces.dom.DeferredDocumentImpl.setXmlStandalone(Z)V
> at org.apache.cxf.frontend.WSDLGetUtils.updateDoc(WSDLGetUtils.java:332)
> at org.apache.cxf.frontend.WSDLGetUtils.writeWSDLDocument(WSDLGetUtils.java:708)
> at org.apache.cxf.frontend.WSDLGetUtils.getDocument(WSDLGetUtils.java:151)
> at org.apache.cxf.frontend.WSDLGetInterceptor.getDocument(WSDLGetInterceptor.java:129)
> at org.apache.cxf.frontend.WSDLGetInterceptor.handleMessage(WSDLGetInterceptor.java:77)
> at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)
> at org.jboss.wsf.stack.cxf.RequestHandlerImpl.handleHttpRequest(RequestHandlerImpl.java:110)
> at org.jboss.wsf.stack.cxf.transport.ServletHelper.callRequestHandler(ServletHelper.java:134)
> at org.jboss.wsf.stack.cxf.CXFServletExt.invoke(CXFServletExt.java:88)
> at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:301)
> at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doGet(AbstractHTTPServlet.java:225)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:503)
> at org.jboss.wsf.stack.cxf.CXFServletExt.service(CXFServletExt.java:136)
> at org.jboss.wsf.spi.deployment.WSFServlet.service(WSFServlet.java:140)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:590)
> ...
> {code}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
6 years, 1 month