You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Sunitha Kambhampati (JIRA)" <de...@db.apache.org> on 2005/04/26 19:00:28 UTC

[jira] Created: (DERBY-236) Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties
--------------------------------------------------------------------------------------------------------

         Key: DERBY-236
         URL: http://issues.apache.org/jira/browse/DERBY-236
     Project: Derby
        Type: Bug
  Components: Store  
    Versions: 10.1.0.0    
 Environment: All
    Reporter: Sunitha Kambhampati
     Fix For: 10.1.0.0


In org.apache.derby.impl.store.RawStore

in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination.. 


Code :-
			if (SanityManager.DEBUG)
			{
				if (!databaseEncrypted)
				{
					// check for system property if running under sanity - this
					// gives more test coverage for those that that hard code
					// connection URL in the test or somehow go thru the test
					// harness in a strange way.
					String testEncryption =
						PropertyUtil.getSystemProperty("testDataEncryption");

					if (testEncryption != null)
					{
						properties.put(Attribute.DATA_ENCRYPTION, "true");
						properties.put(Attribute.BOOT_PASSWORD, testEncryption);
						databaseEncrypted = true;
                    }
				}
			}

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Assigned: (DERBY-236) Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

Posted by "Sunitha Kambhampati (JIRA)" <de...@db.apache.org>.
     [ http://issues.apache.org/jira/browse/DERBY-236?page=all ]

Sunitha Kambhampati reassigned DERBY-236:
-----------------------------------------

    Assign To: Sunitha Kambhampati

> Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties
> --------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-236
>          URL: http://issues.apache.org/jira/browse/DERBY-236
>      Project: Derby
>         Type: Bug
>   Components: Store
>     Versions: 10.1.0.0
>  Environment: All
>     Reporter: Sunitha Kambhampati
>     Assignee: Sunitha Kambhampati
>     Priority: Minor
>      Fix For: 10.1.0.0

>
> In org.apache.derby.impl.store.RawStore
> in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination.. 
> Code :-
> 			if (SanityManager.DEBUG)
> 			{
> 				if (!databaseEncrypted)
> 				{
> 					// check for system property if running under sanity - this
> 					// gives more test coverage for those that that hard code
> 					// connection URL in the test or somehow go thru the test
> 					// harness in a strange way.
> 					String testEncryption =
> 						PropertyUtil.getSystemProperty("testDataEncryption");
> 					if (testEncryption != null)
> 					{
> 						properties.put(Attribute.DATA_ENCRYPTION, "true");
> 						properties.put(Attribute.BOOT_PASSWORD, testEncryption);
> 						databaseEncrypted = true;
>                     }
> 				}
> 			}

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Updated: (DERBY-236) Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

Posted by "Sunitha Kambhampati (JIRA)" <de...@db.apache.org>.
     [ http://issues.apache.org/jira/browse/DERBY-236?page=all ]

Sunitha Kambhampati updated DERBY-236:
--------------------------------------

    Priority: Minor  (was: Major)

> Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties
> --------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-236
>          URL: http://issues.apache.org/jira/browse/DERBY-236
>      Project: Derby
>         Type: Bug
>   Components: Store
>     Versions: 10.1.0.0
>  Environment: All
>     Reporter: Sunitha Kambhampati
>     Priority: Minor
>      Fix For: 10.1.0.0

>
> In org.apache.derby.impl.store.RawStore
> in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination.. 
> Code :-
> 			if (SanityManager.DEBUG)
> 			{
> 				if (!databaseEncrypted)
> 				{
> 					// check for system property if running under sanity - this
> 					// gives more test coverage for those that that hard code
> 					// connection URL in the test or somehow go thru the test
> 					// harness in a strange way.
> 					String testEncryption =
> 						PropertyUtil.getSystemProperty("testDataEncryption");
> 					if (testEncryption != null)
> 					{
> 						properties.put(Attribute.DATA_ENCRYPTION, "true");
> 						properties.put(Attribute.BOOT_PASSWORD, testEncryption);
> 						databaseEncrypted = true;
>                     }
> 				}
> 			}

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Resolved: (DERBY-236) Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

Posted by "Sunitha Kambhampati (JIRA)" <de...@db.apache.org>.
     [ http://issues.apache.org/jira/browse/DERBY-236?page=all ]
     
Sunitha Kambhampati resolved DERBY-236:
---------------------------------------

    Resolution: Fixed

changes checked in as svn 169913 

1. removed sanity debug code in RawStore to not write bootpassword in plain text into the service.properties 
2. currently the test harness does not seem to pass on the encryption related properties to the MultiTest and with change in #1, encryption wont be used for stress.multi. So changes made to  RunTest to pass on the encryption, testEncryptionAlgorithm values to the MultiTest harness. Also changed mtTestCase to recognize the encryption properties and modify the database url to use for the MultiTest.
-- ran derbyall on jdk142 with no failures
-- verified that encryption run for stress.multi was running ok, by adding keepfiles=true to encryptionAll.properties and checking the service.properties for all the databases created as part of this encryptionAll testrun. 

> Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties
> --------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-236
>          URL: http://issues.apache.org/jira/browse/DERBY-236
>      Project: Derby
>         Type: Bug
>   Components: Store
>     Versions: 10.1.0.0
>  Environment: All
>     Reporter: Sunitha Kambhampati
>     Assignee: Sunitha Kambhampati
>     Priority: Minor
>      Fix For: 10.1.0.0

>
> In org.apache.derby.impl.store.RawStore
> in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination.. 
> Code :-
> 			if (SanityManager.DEBUG)
> 			{
> 				if (!databaseEncrypted)
> 				{
> 					// check for system property if running under sanity - this
> 					// gives more test coverage for those that that hard code
> 					// connection URL in the test or somehow go thru the test
> 					// harness in a strange way.
> 					String testEncryption =
> 						PropertyUtil.getSystemProperty("testDataEncryption");
> 					if (testEncryption != null)
> 					{
> 						properties.put(Attribute.DATA_ENCRYPTION, "true");
> 						properties.put(Attribute.BOOT_PASSWORD, testEncryption);
> 						databaseEncrypted = true;
>                     }
> 				}
> 			}

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


[jira] Closed: (DERBY-236) Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties

Posted by "Sunitha Kambhampati (JIRA)" <de...@db.apache.org>.
     [ http://issues.apache.org/jira/browse/DERBY-236?page=all ]
     
Sunitha Kambhampati closed DERBY-236:
-------------------------------------


> Sane Mode and in our test environment, bootPassword gets written out in plain text to service.properties
> --------------------------------------------------------------------------------------------------------
>
>          Key: DERBY-236
>          URL: http://issues.apache.org/jira/browse/DERBY-236
>      Project: Derby
>         Type: Bug
>   Components: Store
>     Versions: 10.1.0.0
>  Environment: All
>     Reporter: Sunitha Kambhampati
>     Assignee: Sunitha Kambhampati
>     Priority: Minor
>      Fix For: 10.1.0.0

>
> In org.apache.derby.impl.store.RawStore
> in boot(), if we run a test using our testharness and with sane jars, the boot password gets written out to service.properties in plain text. This is incorrect, should not happen even for a sane and test harness combination.. 
> Code :-
> 			if (SanityManager.DEBUG)
> 			{
> 				if (!databaseEncrypted)
> 				{
> 					// check for system property if running under sanity - this
> 					// gives more test coverage for those that that hard code
> 					// connection URL in the test or somehow go thru the test
> 					// harness in a strange way.
> 					String testEncryption =
> 						PropertyUtil.getSystemProperty("testDataEncryption");
> 					if (testEncryption != null)
> 					{
> 						properties.put(Attribute.DATA_ENCRYPTION, "true");
> 						properties.put(Attribute.BOOT_PASSWORD, testEncryption);
> 						databaseEncrypted = true;
>                     }
> 				}
> 			}

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira