[JBoss JIRA] (MODCLUSTER-714) support secret="secret" in AJP nodes
- First Post
- Replies
- Stats
-
Go to
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
[
https://issues.redhat.com/browse/MODCLUSTER-714?page=com.atlassian.jira.p...
]
Radoslav Husar updated MODCLUSTER-714:
--------------------------------------
Status: Resolved (was: Pull Request Sent)
Resolution: Done
[~jfclere] PR was merged, should this be resolved or does it need anything on the Java
side?
support secret="secret" in AJP nodes
------------------------------------
Key: MODCLUSTER-714
URL: https://issues.redhat.com/browse/MODCLUSTER-714
Project: mod_cluster
Issue Type: Bug
Components: Native (httpd modules)
Reporter: Jean-Frederic Clere
Assignee: Jean-Frederic Clere
Priority: Major
The CVE-2020-1938 "mitigation" forces the use of a secret between httpd and the
back-end.
<Connector port = "8009"
protocol = "AJP / 1.3"
redirectPort = "8443"
address = "YOUR_TOMCAT_IP_ADDRESS"
requiredSecret = "YOUR_TOMCAT_AJP_SECRET" />
Actually secret="secret" is support in mod_proxy_ajp but not in mod_cluster.
That prevents use using the mitigation.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
1723
days inactive
1723
days old
mod_cluster-issues@lists.jboss.org
0 comments
1 participants
tags (0)
participants (1)
-
Radoslav Husar (Jira)