Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-11067

FAMILY and HASH selectors in Elytron client are parsed incorrectly

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 7.1.0.DR19
    • 7.1.0.DR18
    • Security
    • None

    Description

      When #FAMILY or #HASH selector is used in Elytron client configuration file then it is parsed incorrectly - end bracket ')' is included in parsed family/hash name - it means it results to DIGEST) instead of DIGEST. It seems it is parsed incorrectly in parseSpecialWithName method of org.wildfly.security.sasl.SaslMechanismSelector class in [1].

      Following element for selector is used in Elytron client configuration file:

      ...
<sasl-mechanism-selector selector="#FAMILY(DIGEST)"/>
...

      [1] https://github.com/wildfly-security/wildfly-elytron/blob/master/src/main/java/org/wildfly/security/sasl/SaslMechanismSelector.java#L693

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. ELY-1184 FAMILY and HASH selectors in Elytron client are parsed incorrectly

          • Critical - To be worked on immediately following BLOCKER issues.
          • Resolved
          is duplicated by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-11077 Mechanism names in 'or, 'and', 'eq' or 'if' predicates are not parsed correctly in mechanism selector in Elytron client

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified
          is incorporated by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-11101 Upgrade WildFly Elytron to 1.1.0.Beta46

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified
          relates to

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-11070 Only the last mechanism selector is used in Elytron client configuration

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified

          Activity

            People

              chaowan@redhat.com Chao Wang
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: