JavaMailContainer is broken for all password not consisting of only lowercase 
characters
----------------------------------------------------------------------------------------

                 Key: OFBIZ-543
                 URL: http://issues.apache.org/jira/browse/OFBIZ-543
             Project: OFBiz (The Open for Business Project)
          Issue Type: Bug
          Components: framework
    Affects Versions: SVN trunk
            Reporter: Stefan Huehner
            Priority: Critical
         Attachments: ofbiz_mail1.diff

Hi,

after 2 hours of debugging the JavaMailContainer and working with javamail 
properties and network traces i noticed that when creating the JavaMail session 
the Container transforms all property names and ALL property values (including 
the password) to lowercase. Thus authentication fails if the password does 
contain uppercase characters.

The attached patch removes the conversion of property values to lowercase 
altogether, which fixes the issue. As i see no pressing issue to convert other 
property-values to lowercase i chose this way instead of excluding only 
selected properties.

The second change to the Container prints out the Text of the exception which 
has occured when reporting that the mail store could not be opened to give the 
user a clue about the source (i.e. SSL trust chain verification problem).


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to