9:06 p.m.
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.0.0.CR1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:32 p.m.
New subject: [JBoss JIRA] Updated: (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-777:
---------------------------------
Fix Version/s: 7.1.0.Alpha1
(was: 7.0.0.CR1)
Component/s: Security
Need to re-visit along with SASL mechanisms used by Remoting i.e. can we make the strategy
pluggable there?
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.1.0.Alpha1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
1:59 p.m.
New subject: [JBoss JIRA] Updated: (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-777:
---------------------------------
Fix Version/s: 7.1.0.Beta1
(was: 7.1.0.Alpha1)
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.1.0.Beta1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:29 a.m.
New subject: [JBoss JIRA] Updated: (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-777:
---------------------------------
Fix Version/s: 7.1.0.Beta1
(was: 7.1.0.Alpha1)
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.1.0.Beta1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:32 p.m.
New subject: [JBoss JIRA] (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-777:
---------------------------------
Fix Version/s: 7.1.0.CR1
(was: 7.1.0.Beta1)
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.1.0.CR1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:44 p.m.
New subject: [JBoss JIRA] (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse resolved AS7-777.
----------------------------------
Fix Version/s: (was: 7.1.0.CR1)
Resolution: Deferred
Not a priority at the moment, will re-visit post 7.1.0
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:27 p.m.
New subject: [JBoss JIRA] (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse reopened AS7-777:
----------------------------------
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Labels: Common_Authentication
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:27 p.m.
New subject: [JBoss JIRA] (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-777:
---------------------------------
Fix Version/s: 7.2.0.Alpha1
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Labels: Common_Authentication
Fix For: 7.2.0.Alpha1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:33 p.m.
New subject: [JBoss JIRA] (AS7-777) Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
[
https://issues.jboss.org/browse/AS7-777?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-777:
---------------------------------
Fix Version/s: 7.3.0.Alpha1
(was: 7.2.0.Alpha1)
Switchable Nonce Handling Strategy for HTTP DigestAuthenticator
---------------------------------------------------------------
Key: AS7-777
URL: https://issues.jboss.org/browse/AS7-777
Project: Application Server 7
Issue Type: Task
Components: Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Labels: Common_Authentication
Fix For: 7.3.0.Alpha1
Allow the nonce strategy to be switchable: -
1 - Real 'Number Used Once' - i.e. new nonce for each request.
2 - Nonce per connection i.e. as long as a connection is kept alive allow re-use of nonce
- new nonce on new connection.
3 - Timed nonce - Generate a nonce with a server secret and timestamp, nonce will be
accepted for a validity period.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4195
days inactive
4732
days old
8 comments
3 participants
participants (3)
-
Darran Lofthouse (JIRA) -
Darran Lofthouse (Resolved) (JIRA)
-
Darran Lofthouse (Updated) (JIRA)