Patches item #1003258, was opened at 2004-08-04 15:23
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=376687&aid=1003258&group_id=22866
Category: JBossSX
Group: v3.2
Status: Open
Resolution: None
Priority: 5
Submitted By: Rolf Arne Corneliussen (rolfarne)
Assigned to: Nobody/Anonymous (nobody)
Summary: JaasSecurityManager and caching of X509Certificate chains
Initial Comment:
I have a Login module that I use with SSL client
certificates. The log from the module suggests that it is
invoked by the JaasSecurityManager on every client call,
even when the client (and principal) is previously
authenticated, and the principal is in the cache. Other
username/password based modules do not show this
behavior.
Below is a patch to JaasSecurityManager that compares
arrarys of X509Certificates in the validateCache method
(don't know if this form causes some odd linebreaks):
---JaasSecurityManager.java 2004-06-04
02:31:50.000000000 +0200
+++ JaasSecurityManager.java 2004-08-04
14:26:58.000000000 +0200
@@ -10,6 +10,7 @@
import java.lang.reflect.UndeclaredThrowableException;
import java.security.Principal;
import java.security.acl.Group;
+import java.security.cert.X509Certificate;
import java.util.Arrays;
import java.util.Enumeration;
import java.util.HashSet;
@@ -515,6 +516,12 @@
byte[] a2 = (byte[]) credential;
isValid = Arrays.equals(a1, a2);
}
+ else if ( subjectCredential instanceof
X509Certificate[] )
+ {
+ X509Certificate[] a1 = (X509Certificate[])
subjectCredential;
+ X509Certificate[] a2 = (X509Certificate[])
credential;
+ isValid = Arrays.equals(a1, a2);
+ }
else
{
isValid = subjectCredential.equals(credential);
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=376687&aid=1003258&group_id=22866
-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
JBoss-Development mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-development
