You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by "Ruchith Udayanga Fernando (Resolved) (JIRA)" <ji...@apache.org> on 2011/12/20 03:49:31 UTC
[jira] [Resolved] (RAMPART-350) Comment out the logging of password
{ie log.debug("Password : " + password);} from class BindingBuilder
[ https://issues.apache.org/jira/browse/RAMPART-350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ruchith Udayanga Fernando resolved RAMPART-350.
-----------------------------------------------
Resolution: Fixed
Fixed in the latest trunk (revision : 1221080)
You should be able to build your own modified rampart-core-1.3.jar using the source from the 1.3 tag:
http://svn.apache.org/repos/asf/axis/axis2/java/rampart/tags/java/1_3/modules/rampart-core/
> Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder
> -------------------------------------------------------------------------------------------------------
>
> Key: RAMPART-350
> URL: https://issues.apache.org/jira/browse/RAMPART-350
> Project: Rampart
> Issue Type: Improvement
> Components: rampart-core
> Affects Versions: 1.3
> Reporter: Hemant Shinde
> Priority: Critical
> Labels: rampart-core-1.3-patch.jar
> Fix For: 1.3
>
>
> Currently, I am using Apache's rampart-core-1.3.jar file in one of our project. Due to security reasons we have been asked to comment out few logging statements from the class files that are included in this jar. The comments are as follows:
> a. Comment out the logging of password {ie log.debug("Password : " + password);} from class BindingBuilder [MethodName: addUsernameToken() & getSignatureBuider()].
> I have been trying to do this on my local repository but it seems that there are few project dependencies on rampart-core which is making difficult to compile & create new jar from my changes. Hence if you can provide any help that will be highly appreciated.
> Thanks & Regards,
> Hemant
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org