Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-2496

Add integrity to existing filesystem realms using Elytron Tool

    XMLWordPrintable

Details

    Description

      Currently, a filesystem realm created before WildFly 27 cannot add integrity checking. A migration option should be added to elytron-tool in order to update the version of the identity files. To minimize risks from bypassing the integrity verification, this will be the only way to upgrade an existing filesystem realm.

      Original discussion is included in wildfly-security/wildfly-elytron#1848.

      Attachments

        Issue Links

          blocks

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) ELY-2547 Add Elytron Tool option to overwrite CLI script

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Pull Request Sent
          clones

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-24206 Unable to add integrity support to existing filesystem realm

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. ELY-2491 Unable to add integrity support to existing filesystem realm

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          incorporates

          Bug - A problem that impairs or prevents the functions of the product. ELY-2530 Elytron Tool encrypt command incorrectly overwrites CLI script

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. ELY-2536 Tool encrypt command creates invalid CLI script for bulk conversion

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. ELY-2540 Elytron Tool filesystem-realm-encrypt checks incorrect script location for overwrite

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. ELY-2541 Elytron Tool filesystem-realm-encrypt tests use incorrect credential store path

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. ELY-2542 Elytron Tool filesystem-realm-encrypt command creates CLI script even if upgrade fails

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. ELY-2546 Elytron Tool encrypt command appends CLI script if not overwritten

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Resolved
          is depended on by

          Bug - A problem that impairs or prevents the functions of the product. WFCORE-6129 Unable to add integrity support to existing filesystem realm

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Activity

            People

              rh-ee-carodrig Cameron Rodriguez (Inactive)
              rh-ee-carodrig Cameron Rodriguez (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: