You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Stefan Kombrink (JIRA)" <ji...@apache.org> on 2014/10/07 13:22:33 UTC

[jira] [Commented] (DIRSERVER-2004) Non-standard way of base64 calculation in ads-certificatePassword

    [ https://issues.apache.org/jira/browse/DIRSERVER-2004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14161773#comment-14161773 ] 

Stefan Kombrink commented on DIRSERVER-2004:
--------------------------------------------

Just to avoid confusion: I wasnt aware that the 'K' (/bin/base64) character serves as suffix in case there is no padding. 


> Non-standard way of base64 calculation in ads-certificatePassword
> -----------------------------------------------------------------
>
>                 Key: DIRSERVER-2004
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2004
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 2.0.0-M17
>         Environment: CentOs 6.5, JAVA OpenJRE 1.7.0
>            Reporter: Stefan Kombrink
>            Assignee: Kiran Ayyagari
>            Priority: Minor
>
> When using StartTLS authentication a certkeystore and a keystore password HHHHHHHH is defined.
> It is set in
>      ads-keystoreFile: /etc/pki/tls/certs/keystore.jks
>      ads-certificatePassword: base64(HHHHHHHH)
> as to be found in the config file
>      vim /var/lib/apacheds-2.0.0_M17/default/conf/config.ldif
> Comparison of base64 values:
>  echo HHHHHHHH | /bin/base64 
> SEhISEhISEgK
>  cat /var/lib/apacheds-2.0.0_M17/default/conf/config.ldif | grep ads-certificatePassword
> ads-certificatePassword:: SEhISEhISEg=
> The keystore works okay, indicating, that the password is saved correctly.
> Just the suffix of the base64 value differs from what base64(coreutils package) computes.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)