Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-11396

Elytron - *-PLUS SASL mechanisms don't work - part of channel binding integration seems to be missing

    XMLWordPrintable

Details

    • Hide

      Reproducer test code is available here: https://github.com/kwart/wildfly-core/blob/JBEAP-11396-scram-plus-reproducer/testsuite/elytron/src/test/java/org/wildfly/test/integration/elytron/sasl/mgmt/PlusSaslTestCase.java

      Full steps to reproduce the issue:

      git clone -b JBEAP-11396-scram-plus-reproducer https://github.com/kwart/wildfly-core.git
cd wildfly-core
# Edit testsuite/elytron/pom.xml to current version e.g. 3.0.0.Beta27-SNAPSHOT
mvn clean install -DskipTests -Dcheckstyle.skip
cd testsuite/elytron/
mvn clean test -Dcheckstyle.skip -Dtest=PlusSaslTestCase
      Show
      Reproducer test code is available here: https://github.com/kwart/wildfly-core/blob/JBEAP-11396-scram-plus-reproducer/testsuite/elytron/src/test/java/org/wildfly/test/integration/elytron/sasl/mgmt/PlusSaslTestCase.java Full steps to reproduce the issue: git clone -b JBEAP-11396-scram-plus-reproducer https: //github.com/kwart/wildfly-core.git cd wildfly-core # Edit testsuite/elytron/pom.xml to current version e.g. 3.0.0.Beta27-SNAPSHOT mvn clean install -DskipTests -Dcheckstyle.skip cd testsuite/elytron/ mvn clean test -Dcheckstyle.skip -Dtest=PlusSaslTestCase

    Description

      I'm not able to get PLUS SASL mechanisms (i.e. the ones with channel binding) working. It seems there is a missing piece of integration. The mechanisms are required by EAP7-530 and EAP7-142.

      I don't see the wrapper SASL factories, which are responsible for handling ChannelBindingCallback, used in the application server. (e.g. the TLSServerEndPointChannelBindingSaslClientFactory).

      This issue is blocking test development.

      There is still a chance the problem is in my test configuration, but the documentation of this topic is still a little bit sparse.

      Attachments

        Issue Links

          is blocked by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-11911 Upgrade JBoss Remoting to 5.0.0.CR4

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          is caused by

          Bug - A problem that impairs or prevents the functions of the product. REM3-291 SSL information should be available on inner authentications

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. ELY-1232 Elytron - SCRAM PLUS SASL mechanisms don't work - part of channel binding integration seems to be missing

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Resolved
          is incorporated by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-11137 (7.1.0) Upgrade to WildFly Core to 3.0.0.Beta26

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-11466 (7.1.0) Upgrade to WildFly Core to 3.0.0.Beta28

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          is related to

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-12231 Handle properly non-PLUS Elytron SASL mechanisms when SSL context is used (i.e. channel binding is possible)

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-12689 Elytron GS2-KRB5 SASL mechanism (non-PLUS) is allowed even if the channel binding is possible

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified
          relates to

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-11925 Coverity static analysis: Dereference null return value in ServerAuthenticationContext (Elytron)

          • Critical - To be worked on immediately following BLOCKER issues.
          • Verified

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) JBEAP-12232 Document how are SASL mechanisms handled when they support channel binding

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed

          Activity

            People

              psilva@redhat.com Pedro Igor Craveiro
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: