Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-4309

Value validator for 'host-context-map' attribute of 'server-ssl-sni-context' resource

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Done
    • Icon: Minor Minor
    • 9.0.0.Beta2, 9.0.0.Final
    • 7.0.0.Final
    • Security
    • None

      There is not validation for 'host-context-map' property values on key side. There is validation for the values that represents 'server-ssl-contexts', although, there is no validation for host matching part. E.g. writing attribute of this value is possible:

      /subsystem=elytron/server-ssl-sni-context=serverSslSniCtx:write-attribute(name=host-context-map,value={"\\?.example.com"=validSslContext,"..example.com"="validSslContext", "\\*\\*.example.com"=validSslContext})
      
      "\\?.example.com"
      "..example.com"
      "\\*\\*.example.com"
      

      even though, these are invalid host name matchers IMHO. It would be nice to identify these and report those to user immediately during the configuration attempt.

              dvilkola@redhat.com Diana Krepinska (Inactive)
              jstourac@redhat.com Jan Stourac
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: