You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "viola.lu (Created) (JIRA)" <ji...@apache.org> on 2011/10/13 03:35:11 UTC
[jira] [Created] (GERONIMO-6187) Keystore files filter under
var/security/keystores
Keystore files filter under var/security/keystores
--------------------------------------------------
Key: GERONIMO-6187
URL: https://issues.apache.org/jira/browse/GERONIMO-6187
Project: Geronimo
Issue Type: Improvement
Security Level: public (Regular issues)
Components: security
Affects Versions: 2.2, 2.1, 3.0
Reporter: viola.lu
Assignee: viola.lu
Priority: Minor
Fix For: 2.1.8, 2.2.2
Currently in geronimo 2.1.*, if i run keytool in jdk to generate csr or other non-keystore files under var/security/keystores, geronimo server will persist them in j2ee-security module when i access keystore porlet in admin console, which scans all files under this folder and instance FileKeystoreInstance GBean no matter what type of file.
If so, even user create an empty file of any type, it will be written to config.xml. We have to filter files, only keystore files should be under that folder.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (GERONIMO-6187) Keystore files filter under
var/security/keystores
Posted by "viola.lu (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-6187?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
viola.lu resolved GERONIMO-6187.
--------------------------------
Resolution: Fixed
Fix Version/s: 3.0
> Keystore files filter under var/security/keystores
> --------------------------------------------------
>
> Key: GERONIMO-6187
> URL: https://issues.apache.org/jira/browse/GERONIMO-6187
> Project: Geronimo
> Issue Type: Improvement
> Security Level: public(Regular issues)
> Components: security
> Affects Versions: 2.1, 2.2, 3.0
> Reporter: viola.lu
> Assignee: viola.lu
> Priority: Minor
> Fix For: 2.1.8, 2.2.2, 3.0
>
>
> Currently in geronimo 2.1.*, if i run keytool in jdk to generate csr or other non-keystore files under var/security/keystores, geronimo server will persist them in j2ee-security module when i access keystore porlet in admin console, which scans all files under this folder and instance FileKeystoreInstance GBean no matter what type of file.
> If so, even user create an empty file of any type, it will be written to config.xml. We have to filter files, only keystore files should be under that folder.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira