[JBoss JIRA] (MODCLUSTER-338) Advertise adds a message digest even if security key is not configured
- First Post
- Replies
- Stats
-
Go to
- ----- 2025 -----
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
[
https://issues.jboss.org/browse/MODCLUSTER-338?page=com.atlassian.jira.pl...
]
Radoslav Husar updated MODCLUSTER-338:
--------------------------------------
Status: Pull Request Sent (was: Reopened)
Git Pull Request: https://github.com/modcluster/mod_cluster/pull/58,
https://github.com/modcluster/mod_cluster/pull/18 (was:
https://github.com/modcluster/mod_cluster/pull/18)
Reopening -- not good for backward compatibility of 1.2.x native to 1.3.x Java (i.e.
security key would have to be configured).
Fix via https://github.com/modcluster/mod_cluster/pull/58
Advertise adds a message digest even if security key is not
configured
----------------------------------------------------------------------
Key: MODCLUSTER-338
URL: https://issues.jboss.org/browse/MODCLUSTER-338
Project: mod_cluster
Issue Type: Bug
Affects Versions: 1.2.4.Final
Reporter: Radoslav Husar
Assignee: Radoslav Husar
Fix For: 1.3.0.Alpha1
As wireshark hints, the message digest is always included in the message even if the
advertise security key is not configured.
This would not be such a problem if the salt actually used wouldn't be random bits
from the memory.
This renders the digest completely useless since it can never be verified.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
4012
days inactive
4012
days old
mod_cluster-issues@lists.jboss.org
0 comments
1 participants
tags (0)
participants (1)
-
Radoslav Husar (JIRA)