[jboss-jira] [JBoss JIRA] (WFLY-2614) NPE Defining security realm with empty keystore alias

Darran Lofthouse (JIRA) jira-events at lists.jboss.org
Thu Dec 5 10:37:06 EST 2013


     [ https://issues.jboss.org/browse/WFLY-2614?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated WFLY-2614:
-----------------------------------

    Fix Version/s: 8.0.0.CR1

    
> NPE Defining security realm with empty keystore alias
> -----------------------------------------------------
>
>                 Key: WFLY-2614
>                 URL: https://issues.jboss.org/browse/WFLY-2614
>             Project: WildFly
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Domain Management
>    Affects Versions: 8.0.0.Beta1
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: 8.0.0.CR1
>
>
> The following is logged if alias=""
> {noformat}
> Caused by: java.lang.NullPointerException: invalid null input
>     at java.security.KeyStore.setEntry(KeyStore.java:1321) [rt.jar:1.7.0_13]
>     at org.jboss.as.domain.management.security.FileKeystore.load(FileKeystore.java:106)
>     at org.jboss.as.domain.management.security.FileKeystoreService.start(FileKeystoreService.java:60)
>     at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1944) [jboss-msc-1.2.0.Beta2.jar:1.2.0.Beta2]
>     at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1877) [jboss-msc-1.2.0.Beta2.jar:1.2.0.Beta2]
>     ... 3 more
> {noformat}
> An alias of a zero length string should be rejected in the config and model.  It never worked so not a backwards compatibility issue.
> The alias should also be checked against the keystore and an appropriate error reported if not present.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list