Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-11396

Elytron - *-PLUS SASL mechanisms don't work - part of channel binding integration seems to be missing

XMLWordPrintable

    • Hide

      Reproducer test code is available here: https://github.com/kwart/wildfly-core/blob/JBEAP-11396-scram-plus-reproducer/testsuite/elytron/src/test/java/org/wildfly/test/integration/elytron/sasl/mgmt/PlusSaslTestCase.java

      Full steps to reproduce the issue:

      git clone -b JBEAP-11396-scram-plus-reproducer https://github.com/kwart/wildfly-core.git
cd wildfly-core
# Edit testsuite/elytron/pom.xml to current version e.g. 3.0.0.Beta27-SNAPSHOT
mvn clean install -DskipTests -Dcheckstyle.skip
cd testsuite/elytron/
mvn clean test -Dcheckstyle.skip -Dtest=PlusSaslTestCase
      Show
      Reproducer test code is available here: https://github.com/kwart/wildfly-core/blob/JBEAP-11396-scram-plus-reproducer/testsuite/elytron/src/test/java/org/wildfly/test/integration/elytron/sasl/mgmt/PlusSaslTestCase.java Full steps to reproduce the issue: git clone -b JBEAP-11396-scram-plus-reproducer https: //github.com/kwart/wildfly-core.git cd wildfly-core # Edit testsuite/elytron/pom.xml to current version e.g. 3.0.0.Beta27-SNAPSHOT mvn clean install -DskipTests -Dcheckstyle.skip cd testsuite/elytron/ mvn clean test -Dcheckstyle.skip -Dtest=PlusSaslTestCase

      I'm not able to get PLUS SASL mechanisms (i.e. the ones with channel binding) working. It seems there is a missing piece of integration. The mechanisms are required by EAP7-530 and EAP7-142.

      I don't see the wrapper SASL factories, which are responsible for handling ChannelBindingCallback, used in the application server. (e.g. the TLSServerEndPointChannelBindingSaslClientFactory).

      This issue is blocking test development.

      There is still a chance the problem is in my test configuration, but the documentation of this topic is still a little bit sparse.

        1. PlusSaslTestCase.log
          99 kB

            psilva@redhat.com Pedro Igor Craveiro
            josef.cacek@gmail.com Josef Cacek (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: