You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by "Hemant Shinde (Created) (JIRA)" <ji...@apache.org> on 2011/12/20 01:45:31 UTC
[jira] [Created] (RAMPART-350) Comment out the logging of password
{ie log.debug("Password : " + password);} from class BindingBuilder
Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder
-------------------------------------------------------------------------------------------------------
Key: RAMPART-350
URL: https://issues.apache.org/jira/browse/RAMPART-350
Project: Rampart
Issue Type: Improvement
Components: rampart-core
Affects Versions: 1.3
Reporter: Hemant Shinde
Priority: Critical
Fix For: 1.3
Currently, I am using Apache's rampart-core-1.3.jar file in one of our project. Due to security reasons we have been asked to comment out few logging statements from the class files that are included in this jar. The comments are as follows:
a. Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder [MethodName: addUsernameToken() & getSignatureBuider()].
I have been trying to do this on my local repository but it seems that there are few project dependencies on rampart-core which is making difficult to compile & create new jar from my changes. Hence if you can provide any help that will be highly appreciated.
Thanks & Regards,
Hemant
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Resolved] (RAMPART-350) Comment out the logging of password
{ie log.debug("Password : " + password);} from class BindingBuilder
Posted by "Ruchith Udayanga Fernando (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ruchith Udayanga Fernando resolved RAMPART-350.
-----------------------------------------------
Resolution: Fixed
Fixed in the latest trunk (revision : 1221080)
You should be able to build your own modified rampart-core-1.3.jar using the source from the 1.3 tag:
http://svn.apache.org/repos/asf/axis/axis2/java/rampart/tags/java/1_3/modules/rampart-core/
> Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder
> -------------------------------------------------------------------------------------------------------
>
> Key: RAMPART-350
> URL: https://issues.apache.org/jira/browse/RAMPART-350
> Project: Rampart
> Issue Type: Improvement
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: Hemant Shinde
> Priority: Critical
> Labels: rampart-core-1.3-patch.jar
> Fix For: 1.3
>
>
> Currently, I am using Apache's rampart-core-1.3.jar file in one of our project. Due to security reasons we have been asked to comment out few logging statements from the class files that are included in this jar. The comments are as follows:
> a. Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder [MethodName: addUsernameToken() & getSignatureBuider()].
> I have been trying to do this on my local repository but it seems that there are few project dependencies on rampart-core which is making difficult to compile & create new jar from my changes. Hence if you can provide any help that will be highly appreciated.
> Thanks & Regards,
> Hemant
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
[jira] [Commented] (RAMPART-350) Comment out the logging of
password {ie log.debug("Password : " + password);} from class
BindingBuilder
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RAMPART-350?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13172906#comment-13172906 ]
Hudson commented on RAMPART-350:
--------------------------------
Integrated in Rampart #689 (See [https://builds.apache.org/job/Rampart/689/])
Fix suggested in RAMPART-350
ruchithf :
Files :
* /axis/axis2/java/rampart/trunk/modules/rampart-core/src/main/java/org/apache/rampart/builder/BindingBuilder.java
> Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder
> -------------------------------------------------------------------------------------------------------
>
> Key: RAMPART-350
> URL: https://issues.apache.org/jira/browse/RAMPART-350
> Project: Rampart
> Issue Type: Improvement
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: Hemant Shinde
> Priority: Critical
> Labels: rampart-core-1.3-patch.jar
> Fix For: 1.3
>
>
> Currently, I am using Apache's rampart-core-1.3.jar file in one of our project. Due to security reasons we have been asked to comment out few logging statements from the class files that are included in this jar. The comments are as follows:
> a. Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder [MethodName: addUsernameToken() & getSignatureBuider()].
> I have been trying to do this on my local repository but it seems that there are few project dependencies on rampart-core which is making difficult to compile & create new jar from my changes. Hence if you can provide any help that will be highly appreciated.
> Thanks & Regards,
> Hemant
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org