You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@river.apache.org by "Fred Oliver (JIRA)" <ji...@apache.org> on 2007/07/26 23:34:04 UTC
[jira] Created: (RIVER-86) HttpmdIntegrityVerifier should allow
control over trusted digest algorithms
HttpmdIntegrityVerifier should allow control over trusted digest algorithms
---------------------------------------------------------------------------
Key: RIVER-86
URL: https://issues.apache.org/jira/browse/RIVER-86
Project: River
Issue Type: Improvement
Components: net_jini_url
Affects Versions: jtsk_2.0
Reporter: Fred Oliver
Priority: Minor
Bugtraq ID [5088594|http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=5088594]
In light of the apparent breaking of various digest algorithms, it would seem desirable to have some way to configure HttpmdIntegrityVerifier to control which algorithms are/aren't trusted for integrity purposes. It would seem that this should be part of the spec, not just part of the impl.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (RIVER-86) HttpmdIntegrityVerifier should allow
control over trusted digest algorithms
Posted by "Fred Oliver (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/RIVER-86?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12515878 ]
Fred Oliver commented on RIVER-86:
----------------------------------
A system property "com.sun.jini.url.digestAlgorithms" will identify allowable algorithms (as a comma separated list). If the property is absent, any digest algorithm will be accepted.
Customer can write their own integrity verifier and configure it in as a replacement for HttpmdIntegrityVerifier.
> HttpmdIntegrityVerifier should allow control over trusted digest algorithms
> ---------------------------------------------------------------------------
>
> Key: RIVER-86
> URL: https://issues.apache.org/jira/browse/RIVER-86
> Project: River
> Issue Type: Improvement
> Components: net_jini_url
> Affects Versions: jtsk_2.0
> Reporter: Fred Oliver
> Priority: Minor
>
> Bugtraq ID [5088594|http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=5088594]
> In light of the apparent breaking of various digest algorithms, it would seem desirable to have some way to configure HttpmdIntegrityVerifier to control which algorithms are/aren't trusted for integrity purposes. It would seem that this should be part of the spec, not just part of the impl.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.