[Red Hat JIRA] (ELY-1915) stronger credential store
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/ELY-1915?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse commented on ELY-1915:
---------------------------------------
One thing worth noting is that the type of the KeyStore used to back the credential store can be specified, this does mean PKCS#12 is also an option which has become the standard KeyStore type in Java.
I would still like to consider how alternate file formats could be used but this may be a suitable alternative for many.
> stronger credential store
> -------------------------
>
> Key: ELY-1915
> URL: https://issues.redhat.com/browse/ELY-1915
> Project: WildFly Elytron
> Issue Type: Feature Request
> Components: Credential Store
> Affects Versions: 1.6.1.Final
> Reporter: Hisanobu Okuda
> Priority: Major
>
> JCEKS which is used for credential store uses 3DES. Need more stronger credential store based on a stronger cryptography like AES256 or more.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
4 years, 3 months
[Red Hat JIRA] (ELY-2062) Unexpected order of security-manager permission checks on Eclipse OpenJ9 VM AdoptOpenJDK 11
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/ELY-2062?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse reassigned ELY-2062:
-------------------------------------
Assignee: (was: Darran Lofthouse)
> Unexpected order of security-manager permission checks on Eclipse OpenJ9 VM AdoptOpenJDK 11
> -------------------------------------------------------------------------------------------
>
> Key: ELY-2062
> URL: https://issues.redhat.com/browse/ELY-2062
> Project: WildFly Elytron
> Issue Type: Bug
> Affects Versions: 1.14.1.Final
> Reporter: Marek Kopecky
> Priority: Major
>
> [AlternateSecurityManagerTest|https://github.com/wildfly-security/wildfly-...] fails on Eclipse OpenJ9 VM AdoptOpenJDK 11 because of unexpected order of security-manager permission checks.
> Stacktrace:
> {noformat}
> testDoPrivilegedWithParameter_WithContext(org.wildfly.security.manager.AlternateSecurityManagerTest) Time elapsed: 0.05 sec <<< FAILURE!
> java.lang.AssertionError: Matching CodeSource Location expected:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/test-classes/> but was:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/classes/>
> at org.wildfly.security.manager.AlternateSecurityManagerTest.testDoPrivilegedWithParameter_WithContext(AlternateSecurityManagerTest.java:314)
> testDoChecked_WithContext(org.wildfly.security.manager.AlternateSecurityManagerTest) Time elapsed: 0 sec <<< FAILURE!
> java.lang.AssertionError: Matching CodeSource Location expected:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/classes/> but was:<file:/home/mkopecky/.m2/repository/junit/junit/4.13.1/junit-4.13.1.jar>
> at org.wildfly.security.manager.AlternateSecurityManagerTest.testDoChecked_WithContext(AlternateSecurityManagerTest.java:268)
> testDoUnchecked_WithContext(org.wildfly.security.manager.AlternateSecurityManagerTest) Time elapsed: 0.001 sec <<< FAILURE!
> java.lang.AssertionError: Matching CodeSource Location expected:<file:/home/mkopecky/.m2/repository/junit/junit/4.13.1/junit-4.13.1.jar> but was:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/classes/>
> at org.wildfly.security.manager.AlternateSecurityManagerTest.testDoUnchecked_WithContext(AlternateSecurityManagerTest.java:210)
> testDoUnchecked(org.wildfly.security.manager.AlternateSecurityManagerTest) Time elapsed: 0.001 sec <<< FAILURE!
> java.lang.AssertionError: Matching CodeSource Location expected:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/test-classes/> but was:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/classes/>
> at org.wildfly.security.manager.AlternateSecurityManagerTest.testDoUnchecked(AlternateSecurityManagerTest.java:187)
> testDoPrivilegedWithParameter(org.wildfly.security.manager.AlternateSecurityManagerTest) Time elapsed: 0.001 sec <<< FAILURE!
> java.lang.AssertionError: Matching CodeSource Location expected:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/test-classes/> but was:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/classes/>
> at org.wildfly.security.manager.AlternateSecurityManagerTest.testDoPrivilegedWithParameter(AlternateSecurityManagerTest.java:291)
> testGetPropertyPrivileged(org.wildfly.security.manager.AlternateSecurityManagerTest) Time elapsed: 0.001 sec <<< FAILURE!
> java.lang.AssertionError: Our CodeSource expected:<file:/home/mkopecky/playground/elytron/1.x/manager/base/target/test-classes/> but was:<file:/home/mkopecky/.m2/repository/org/wildfly/security/wildfly-elytron-security-manager-action/1.14.1.CR1-SNAPSHOT/wildfly-elytron-security-manager-action-1.14.1.CR1-SNAPSHOT.jar>
> at org.wildfly.security.manager.AlternateSecurityManagerTest.testGetPropertyPrivileged(AlternateSecurityManagerTest.java:161)
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
4 years, 3 months
[Red Hat JIRA] (WFLY-14380) Cant configure Let's Encrypt simple steps
by erick leal (Jira)
erick leal created WFLY-14380:
---------------------------------
Summary: Cant configure Let's Encrypt simple steps
Key: WFLY-14380
URL: https://issues.redhat.com/browse/WFLY-14380
Project: WildFly
Issue Type: Bug
Affects Versions: 22.0.0.Final
Reporter: erick leal
Assignee: Brian Stansberry
Attachments: Capturar.PNG
I'm tyring to configure Let's Encrypt in my server, and I followed instructions that said to simple type security enable-ssl-http-server --interactive --lets-encrypt
But I believe because I'm in Windows I ran into the issue described in the picture below
!Capturar.PNG!
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
4 years, 3 months
[Red Hat JIRA] (WFLY-14379) Widespread test failures on Fedora 33 with Fedora distribution of OpenJDK 11
by Sonia Zaldana (Jira)
[ https://issues.redhat.com/browse/WFLY-14379?page=com.atlassian.jira.plugi... ]
Sonia Zaldana updated WFLY-14379:
---------------------------------
Description:
Multiple test failures observed in:
* KeystoreRealmTestCase
* AutomaticSelfSignedCertificateNotGeneratedTestCase
They are resolved by updating tests to use SHA256withRSA instead of SHA1withRSA.
was:
Multiple test failures observed in:
* KeystoreRealmTestCase
* AutomaticSelfSignedCertificateNotGeneratedTestCase
> Widespread test failures on Fedora 33 with Fedora distribution of OpenJDK 11
> ----------------------------------------------------------------------------
>
> Key: WFLY-14379
> URL: https://issues.redhat.com/browse/WFLY-14379
> Project: WildFly
> Issue Type: Bug
> Components: Security, Test Suite
> Reporter: Sonia Zaldana
> Assignee: Sonia Zaldana
> Priority: Major
>
> Multiple test failures observed in:
> * KeystoreRealmTestCase
> * AutomaticSelfSignedCertificateNotGeneratedTestCase
>
> They are resolved by updating tests to use SHA256withRSA instead of SHA1withRSA.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
4 years, 3 months