[jboss-jira] [JBoss JIRA] (WFCORE-2541) CS, MASK-password must support same MASKED string without SALT and ITERATION as old vaults system.

Darran Lofthouse (JIRA) issues at jboss.org
Fri Jul 7 06:37:02 EDT 2017


     [ https://issues.jboss.org/browse/WFCORE-2541?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse reassigned WFCORE-2541:
----------------------------------------

    Assignee:     (was: Darran Lofthouse)


> CS, MASK-password must support same MASKED string without SALT and ITERATION as old vaults system.
> --------------------------------------------------------------------------------------------------
>
>                 Key: WFCORE-2541
>                 URL: https://issues.jboss.org/browse/WFCORE-2541
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>            Reporter: Hynek Švábek
>
> MASK-password must support same MASKED string without SALT and ITERATION as old vaults system.
> MASKED password in Elytron has this format
> {code}
> MASK-KAwLfD1BN8WFhZptWsa17G==;12345678;230
> {code}
> But old vault system has SALT and ITERATION as global parameters for all MASK-strings same.
> And you have this format of MASKED password
> {code}
> MASK-KAwLfD1BN8WFhZptWsa17G==
> {code}
> It would be better add there original approach too because of migration...
> Please add there this default option:
> * set SALT and ITERATION default values for using of credential stores. If will be defined MASK-string without SALT and ITERATION then will be used these values.
> * if you use MASK-string;SALT;ITERATION form, then will be used SALT and ITERATION from this.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)



More information about the jboss-jira mailing list