You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Yoav Landman (JIRA)" <ji...@codehaus.org> on 2010/04/07 13:19:22 UTC
[jira] Commented: (MNG-4611) 3.0-alpha7 password decryption log
verbosity
[ http://jira.codehaus.org/browse/MNG-4611?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=216993#action_216993 ]
Yoav Landman commented on MNG-4611:
-----------------------------------
If the password escape mechanism is broken, how is it not a bug? There is really nothing "improper" about the password used, and it is currently the only way to centrally enforce security and to have zero client-side password generation or clear text keys on the client.
> 3.0-alpha7 password decryption log verbosity
> --------------------------------------------
>
> Key: MNG-4611
> URL: http://jira.codehaus.org/browse/MNG-4611
> Project: Maven 2 & 3
> Issue Type: Bug
> Reporter: Dale Wyttenbach
> Assignee: Benjamin Bentmann
>
> The log verbosity of password decryption in 3.0-alpha7 that makes the mvn -X option effectively unusable. The password I've got in my settings.xml file looks like this:
> <password>{DESede}y+qq...==</password>
> This is an Artifactory setup password and it does work, however mvn -X logs exceptions about it so frequently that it makes -X almost impossible to use. Is there some way I can suppress this behavior through configuration? The exception that it logs over and over again is:
> [DEBUG] Failed to decrypt password for server central: org.sonatype.plexus.components.cipher.PlexusCipherException: java.lang.ArrayIndexOutOfBoundsException
> org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException: org.sonatype.plexus.components.cipher.PlexusCipherException: java.lang.ArrayIndexOutOfBoundsException
> ...
> Caused by: java.lang.ArrayIndexOutOfBoundsException
> at java.lang.System.arraycopy(Native Method)
> at org.sonatype.plexus.components.cipher.PBECipher.decrypt64(PBECipher.java:175)
> ... 47 more
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira