[jboss-jira] [JBoss JIRA] (AS7-4014) Somehow a new line character is regularly being appended to base64 encoded passwords - trim whitespace from decoded value.

Darran Lofthouse (JIRA) jira-events at lists.jboss.org
Fri Mar 2 09:45:36 EST 2012


     [ https://issues.jboss.org/browse/AS7-4014?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated AS7-4014:
----------------------------------

        Summary: Somehow a new line character is regularly being appended to base64 encoded passwords - trim whitespace from decoded value.  (was: Somehow a new line character is regularly being appended to base64 encoded passwords - log a WARN if a new line is detected.)
    Description: 
Somehow a new line character is regularly being appended to base64 encoded passwords - trim whitespace from decoded value.

A recent example is 'slavepassword' was encoded as 'c2xhdmVwYXNzd29yZAo=' when actually it should be 'c2xhdmVwYXNzd29yZA=='

(A WARN should also be logged if something has been trimmed)

  was:
Somehow a new line character is regularly being appended to base64 encoded passwords - log a WARN if a new line is detected.

A recent example is 'slavepassword' was encoded as 'c2xhdmVwYXNzd29yZAo=' when actually it should be 'c2xhdmVwYXNzd29yZA=='



Probably just easier to trim it - but do log a WARN so end user knows it was trimmed.
                
> Somehow a new line character is regularly being appended to base64 encoded passwords - trim whitespace from decoded value.
> --------------------------------------------------------------------------------------------------------------------------
>
>                 Key: AS7-4014
>                 URL: https://issues.jboss.org/browse/AS7-4014
>             Project: Application Server 7
>          Issue Type: Task
>          Components: Domain Management, Security
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>            Priority: Critical
>             Fix For: 7.1.1.Final
>
>
> Somehow a new line character is regularly being appended to base64 encoded passwords - trim whitespace from decoded value.
> A recent example is 'slavepassword' was encoded as 'c2xhdmVwYXNzd29yZAo=' when actually it should be 'c2xhdmVwYXNzd29yZA=='
> (A WARN should also be logged if something has been trimmed)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jboss-jira mailing list