[jira] [Updated] (GERONIMO-6440) unlock keystore action appears to be broken when running server against Oracle JDK 1.7
[
https://issues.apache.org/jira/browse/GERONIMO-6440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
xiezhi updated GERONIMO-6440:
-
Affects Version/s: 2.1.8
2.2.1
unlock keystore action appears to be broken when running server against
Oracle JDK 1.7
--
Key: GERONIMO-6440
URL: https://issues.apache.org/jira/browse/GERONIMO-6440
Project: Geronimo
Issue Type: Bug
Security Level: public(Regular issues)
Components: JVM-compatibility
Affects Versions: 2.1.8, 2.2.1, 3.0-beta-1
Reporter: xiezhi
Priority: Blocker
Attachments: PropertyEditors.java.patch
To reproduce the issue, you can follow the steps below.
1.Start geronimo 3.0 server.
2.Use keytool command to create a keystore with a key. For example,
keytool -genkeypair -keystore test.jks -alias testkey -keyalg RSA -keysize
2048 -dname cn=test.apache.org,c=US -validity 365 -storepass welcome1
3.Copy the keystore to geronimo-home\var\security\keystores
4.use deploy encrypt to encrypt the password welcome,go the encrypt string:
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
add the string into config-substitution.properties like this:
test.jks =
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
testkey =
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
5. restart the server.
6. use deploy unlock-keystore command to unlock test.jks. For example,
deploy -u system -p manager unlock-keystore test.jks
The result is the unlock action seems to success. But you can find an ERROR
below in admin console. It will generate a incomplete j2ee-security module in
config.xml. When you restart the server, you will fail on it.
2013-02-27 11:41:06,564 WARN [FileKeystoreManager] keystoreType for new
keystore test.jks set to jks based on file extension.
2013-02-27 11:41:06,660 ERROR [LocalAttributeManager] Unable to format
attribute of type java.net.URI; no editor found
2013-02-27 11:41:06,660 WARN [BasicProxyManager] Could not load interface
org.apache.geronimo.security.keystore.FileKeystoreInsta
nce in provided ClassLoader for
org.apache.geronimo.framework/j2ee-security/3.0.0/car?ServiceModule=org.apache.geronimo.framework/
j2ee-security/3.0.0/car,j2eeType=Keystore,name=test.jks
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [VOTE] Release geronimo-jsp_2.2_spec-1.2 and geronimo-el_2.2_spec-1.0.4
+1, thanks for having putting this together. On Wed, Mar 13, 2013 at 12:58 PM, Jarek Gawor jga...@gmail.com wrote: Hi all, I would like to call a vote on geronimo-jsp_2.2_spec-1.2 and geronimo-el_2.2_spec-1.0.4: geronimo-jsp_2.2_spec-1.2: - minor release, contains minor performance improvements (r1387447) and a synchronization fix (r1386839). - source archives: https://repository.apache.org/content/repositories/orgapachegeronimo-003/org/apache/geronimo/specs/geronimo-jsp_2.2_spec/1.2/ - source tag: https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-jsp_2.2_spec-1.2/ geronimo-el_2.2_spec-1.0.4: - minor release, contains minor performance improvements (r1376237). - source archives: https://repository.apache.org/content/repositories/orgapachegeronimo-003/org/apache/geronimo/specs/geronimo-el_2.2_spec/1.0.4/ - source tag: https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-el_2.2_spec-1.0.4/ Staging repository (contains all artifacts for both specs): - https://repository.apache.org/content/repositories/orgapachegeronimo-003/ Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) -- Shawn
Re: [VOTE] aspectjrt-1.6.8_2, aspectjweaver-1.6.8_2, and commons-httpclient-3.1_2
+1, thanks for having putting this together. On Wed, Mar 13, 2013 at 10:56 PM, Jarek Gawor jga...@gmail.com wrote: Hi all, I would like to call a vote on aspectjrt-1.6.8_2, aspectjweaver-1.6.8_2, and commons-httpclient-3.1_2. aspectjrt-1.6.8_2: - minor release, contains GERONIMO-6415. - source archives: https://repository.apache.org/content/repositories/orgapachegeronimo-005/org/apache/geronimo/bundles/aspectjrt/1.6.8_2/ - source tag: https://svn.apache.org/repos/asf/geronimo/bundles/tags/aspectjrt-1.6.8_2/ aspectjweaver-1.6.8_2: - minor release, contains GERONIMO-6415. - source archives: https://repository.apache.org/content/repositories/orgapachegeronimo-005/org/apache/geronimo/bundles/aspectjweaver/1.6.8_2 - source tag: https://svn.apache.org/repos/asf/geronimo/bundles/tags/aspectjweaver-1.6.8_2/ commons-httpclient-3.1_2: - minor release, contains GERONIMO-6406. - source archives: https://repository.apache.org/content/repositories/orgapachegeronimo-005/org/apache/geronimo/bundles/commons-httpclient/3.1_2/ - source tag: https://svn.apache.org/repos/asf/geronimo/bundles/tags/commons-httpclient-3.1_2/ Staging repository (contains all artifacts for all bundles): - https://repository.apache.org/content/repositories/orgapachegeronimo-005/ Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) -- Shawn
[jira] [Updated] (GERONIMO-6440) unlock keystore action appears to be broken when running server against Oracle JDK 1.7
[
https://issues.apache.org/jira/browse/GERONIMO-6440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
xiezhi updated GERONIMO-6440:
-
Attachment: (was: PropertyEditors.java.patch)
unlock keystore action appears to be broken when running server against
Oracle JDK 1.7
--
Key: GERONIMO-6440
URL: https://issues.apache.org/jira/browse/GERONIMO-6440
Project: Geronimo
Issue Type: Bug
Security Level: public(Regular issues)
Components: JVM-compatibility
Affects Versions: 2.1.8, 2.2.1, 3.0-beta-1
Reporter: xiezhi
Priority: Blocker
Attachments: PropertyEditors.java.patch
To reproduce the issue, you can follow the steps below.
1.Start geronimo 3.0 server.
2.Use keytool command to create a keystore with a key. For example,
keytool -genkeypair -keystore test.jks -alias testkey -keyalg RSA -keysize
2048 -dname cn=test.apache.org,c=US -validity 365 -storepass welcome1
3.Copy the keystore to geronimo-home\var\security\keystores
4.use deploy encrypt to encrypt the password welcome,go the encrypt string:
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
add the string into config-substitution.properties like this:
test.jks =
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
testkey =
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
5. restart the server.
6. use deploy unlock-keystore command to unlock test.jks. For example,
deploy -u system -p manager unlock-keystore test.jks
The result is the unlock action seems to success. But you can find an ERROR
below in admin console. It will generate a incomplete j2ee-security module in
config.xml. When you restart the server, you will fail on it.
2013-02-27 11:41:06,564 WARN [FileKeystoreManager] keystoreType for new
keystore test.jks set to jks based on file extension.
2013-02-27 11:41:06,660 ERROR [LocalAttributeManager] Unable to format
attribute of type java.net.URI; no editor found
2013-02-27 11:41:06,660 WARN [BasicProxyManager] Could not load interface
org.apache.geronimo.security.keystore.FileKeystoreInsta
nce in provided ClassLoader for
org.apache.geronimo.framework/j2ee-security/3.0.0/car?ServiceModule=org.apache.geronimo.framework/
j2ee-security/3.0.0/car,j2eeType=Keystore,name=test.jks
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (GERONIMO-6440) unlock keystore action appears to be broken when running server against Oracle JDK 1.7
[
https://issues.apache.org/jira/browse/GERONIMO-6440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
xiezhi updated GERONIMO-6440:
-
Attachment: PropertyEditors.java.patch
Got some advice, updated the patch.
unlock keystore action appears to be broken when running server against
Oracle JDK 1.7
--
Key: GERONIMO-6440
URL: https://issues.apache.org/jira/browse/GERONIMO-6440
Project: Geronimo
Issue Type: Bug
Security Level: public(Regular issues)
Components: JVM-compatibility
Affects Versions: 2.1.8, 2.2.1, 3.0-beta-1
Reporter: xiezhi
Priority: Blocker
Attachments: PropertyEditors.java.patch
To reproduce the issue, you can follow the steps below.
1.Start geronimo 3.0 server.
2.Use keytool command to create a keystore with a key. For example,
keytool -genkeypair -keystore test.jks -alias testkey -keyalg RSA -keysize
2048 -dname cn=test.apache.org,c=US -validity 365 -storepass welcome1
3.Copy the keystore to geronimo-home\var\security\keystores
4.use deploy encrypt to encrypt the password welcome,go the encrypt string:
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
add the string into config-substitution.properties like this:
test.jks =
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
testkey =
{Simple}rO0ABXNyABlqYXZheC5jcnlwdG8uU2VhbGVkT2JqZWN0PjY9psO3VHACAARbAA1lbmNvZGVkUGFyYW1zdAACW0JbABBlbmNyeXB0ZWRDb250ZW50cQB+AAFMAAlwYXJhbXNBbGd0ABJMamF2YS9sYW5nL1N0cmluZztMAAdzZWFsQWxncQB+AAJ4cHB1cgACW0Ks8xf4BghU4AIAAHhwEKvo5tkjHVqHlsBtDNRytadwdAADQUVT
5. restart the server.
6. use deploy unlock-keystore command to unlock test.jks. For example,
deploy -u system -p manager unlock-keystore test.jks
The result is the unlock action seems to success. But you can find an ERROR
below in admin console. It will generate a incomplete j2ee-security module in
config.xml. When you restart the server, you will fail on it.
2013-02-27 11:41:06,564 WARN [FileKeystoreManager] keystoreType for new
keystore test.jks set to jks based on file extension.
2013-02-27 11:41:06,660 ERROR [LocalAttributeManager] Unable to format
attribute of type java.net.URI; no editor found
2013-02-27 11:41:06,660 WARN [BasicProxyManager] Could not load interface
org.apache.geronimo.security.keystore.FileKeystoreInsta
nce in provided ClassLoader for
org.apache.geronimo.framework/j2ee-security/3.0.0/car?ServiceModule=org.apache.geronimo.framework/
j2ee-security/3.0.0/car,j2eeType=Keystore,name=test.jks
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [VOTE] [RESULT] (take 2) Release genesis-2.1 and xbean-3.13
Np, thank to you for helping. Btw, with the 'what else' I meant things like a announcement mail and moving binaries to a download area. Not sure if / how this is done for such partly releases in G#. LieGrue, strub - Original Message - From: Kevan Miller kevan.mil...@gmail.com To: dev@geronimo.apache.org; Mark Struberg strub...@yahoo.de Cc: Sent: Thursday, March 14, 2013 9:19 PM Subject: Re: [VOTE] [RESULT] (take 2) Release genesis-2.1 and xbean-3.13 On Mar 14, 2013, at 1:28 PM, Mark Struberg strub...@yahoo.de wrote: hi folks! Time to tally the votes For genesis: +1: Jarek Gawor, Kevan Miller, David Blevins, Guillaume Nodet , Forrest Xia +1 (nonbinding): Romain Manni-Buccau, Mark Struberg For xbean +1: Kevan Miller, David Blevins, FGuillaume Nodet, Forrest Xia +0: Jarek Gawor, +1 (nonbinding): Romain Manni-Buccau, Mark Struberg txs 4 all who voted! I gonna push the maven artifacts to central (and later remove the unnecessary repo section from the xbean pom). What else is to be done in geronimo-land for such a 'spare-parts' release? Oh yeah… Thanks! --kevan
Re: [VOTE] [RESULT] (take 2) Release genesis-2.1 and xbean-3.13
On Mar 15, 2013, at 8:58 AM, Mark Struberg strub...@yahoo.de wrote: Np, thank to you for helping. Btw, with the 'what else' I meant things like a announcement mail and moving binaries to a download area. Not sure if / how this is done for such partly releases in G#. Ah. I see. The news (http://geronimo.apache.org/news-archive.html) and mailing list announcements have normally been around the more consumable releases (server, eclipse plugin, samples). That's not to say that xbean/genesis can't have similar treatment… But not necessary, either, IMO. --kevan
Re: [VOTE] [RESULT] (take 2) Release genesis-2.1 and xbean-3.13
We have a separate wiki space for xbean (https://cwiki.apache.org/confluence/display/XB/Index). So probably adding a blog entry about the 3.13 release would be good. It should automatically (and eventually) get published onto http://geronimo.apache.org/xbean/. Jarek On Fri, Mar 15, 2013 at 8:58 AM, Mark Struberg strub...@yahoo.de wrote: Np, thank to you for helping. Btw, with the 'what else' I meant things like a announcement mail and moving binaries to a download area. Not sure if / how this is done for such partly releases in G#. LieGrue, strub - Original Message - From: Kevan Miller kevan.mil...@gmail.com To: dev@geronimo.apache.org; Mark Struberg strub...@yahoo.de Cc: Sent: Thursday, March 14, 2013 9:19 PM Subject: Re: [VOTE] [RESULT] (take 2) Release genesis-2.1 and xbean-3.13 On Mar 14, 2013, at 1:28 PM, Mark Struberg strub...@yahoo.de wrote: hi folks! Time to tally the votes For genesis: +1: Jarek Gawor, Kevan Miller, David Blevins, Guillaume Nodet , Forrest Xia +1 (nonbinding): Romain Manni-Buccau, Mark Struberg For xbean +1: Kevan Miller, David Blevins, FGuillaume Nodet, Forrest Xia +0: Jarek Gawor, +1 (nonbinding): Romain Manni-Buccau, Mark Struberg txs 4 all who voted! I gonna push the maven artifacts to central (and later remove the unnecessary repo section from the xbean pom). What else is to be done in geronimo-land for such a 'spare-parts' release? Oh yeah… Thanks! --kevan
