EncryptionTypes are not correctly handled in the server
-------------------------------------------------------

                 Key: DIRSERVER-1690
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1690
             Project: Directory ApacheDS
          Issue Type: Bug
            Reporter: Emmanuel Lecharny
            Priority: Blocker


Currently, EncryptionType are stored in a Set, and we compare the expected 
ETypes passed by the client with the configured ETypes we support in the 
server. They are both stored in a Set, which is not ordered.

The problem is that there is nothing like a EType negotiation between the 
client and the server, so the encrypted data will be encrypted using the 
strongest Etype found in the list of Etypes, where the leftmost EType is the 
strongest, and the rightmost is the weaker.

Using a set is then a guarantee that we will face issues at some point. We must 
use a List instead.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to