You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2012/09/03 12:36:11 UTC

[jira] [Commented] (SYNCOPE-51) Remove MD5 as a supported password cipher algorithm

    [ https://issues.apache.org/jira/browse/SYNCOPE-51?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13447202#comment-13447202 ] 

Hudson commented on SYNCOPE-51:
-------------------------------

Integrated in Syncope-linux #264 (See [https://builds.apache.org/job/Syncope-linux/264/])
    Fixes issue SYNCOPE-51 and SYNCOPE-100 special thanks to Bob and Massimiliano (Revision 1380190)

     Result = SUCCESS
fmartelli : 
Files : 
* /incubator/syncope/trunk/archetype/src/main/resources/archetype-resources/core/src/main/resources
* /incubator/syncope/trunk/archetype/src/main/resources/archetype-resources/core/src/main/resources/security.properties
* /incubator/syncope/trunk/archetype/src/main/resources/archetype-resources/core/src/test/resources/security.properties
* /incubator/syncope/trunk/client/src/main/java/org/apache/syncope/types/CipherAlgorithm.java
* /incubator/syncope/trunk/core/pom.xml
* /incubator/syncope/trunk/core/src/main/java/org/apache/syncope/core/persistence/beans/user/SyncopeUser.java
* /incubator/syncope/trunk/core/src/main/java/org/apache/syncope/core/rest/data/UserDataBinder.java
* /incubator/syncope/trunk/core/src/main/java/org/apache/syncope/core/security/EncodePasswordCLI.java
* /incubator/syncope/trunk/core/src/main/java/org/apache/syncope/core/security/PasswordEncoder.java
* /incubator/syncope/trunk/core/src/main/java/org/apache/syncope/core/security/SyncopeAuthenticationProvider.java
* /incubator/syncope/trunk/core/src/main/java/org/apache/syncope/core/workflow/NoOpUserWorkflowAdapter.java
* /incubator/syncope/trunk/core/src/main/resources/content.xml
* /incubator/syncope/trunk/core/src/main/resources/security.properties
* /incubator/syncope/trunk/core/src/main/resources/securityContext.xml
* /incubator/syncope/trunk/core/src/test/java/org/apache/syncope/core/rest/UserTestITCase.java
* /incubator/syncope/trunk/core/src/test/java/org/apache/syncope/core/security
* /incubator/syncope/trunk/core/src/test/java/org/apache/syncope/core/security/PasswordEncoderTest.java
* /incubator/syncope/trunk/core/src/test/resources/content.xml
* /incubator/syncope/trunk/core/src/test/resources/security.properties
* /incubator/syncope/trunk/pom.xml

                
> Remove MD5 as a supported password cipher algorithm
> ---------------------------------------------------
>
>                 Key: SYNCOPE-51
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-51
>             Project: Syncope
>          Issue Type: Improvement
>            Reporter: Colm O hEigeartaigh
>            Assignee: Massimiliano Perrone
>             Fix For: 1.1.0-incubating
>
>         Attachments: syncopeIssue51.patch
>
>
> MD5 is currently used as the default password cipher algorithm. We should remove the ability to use MD5 and switch to using a more secure alternative.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira