[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-10-13 Thread Matej Novotny (JIRA)
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Matej Novotny closed an issue as Cannot Reproduce Bug 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
I am closing this issue as we are unable to reproduce the bug. Feel free to reopen the issue if you can provide us with a reproducer. 
 
 
 
 
 
 
 
 
 
 Weld /  WELD-2228 
 
 
 
  Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 

Change By:
 
 Matej Novotny 
 
 
 

Status:
 
 Open Closed 
 
 
 

Resolution:
 
 Cannot Reproduce Bug 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   

___
weld-issues mailing list
weld-issues@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/weld-issues

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-19 Thread Tomas Remes (JIRA)
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Tomas Remes commented on  WELD-2228 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
  Re: Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 
 
Thomas Wöckinger Nope I was requesting MyInterface class and I was using same type hierarchy as you described. I am affraid we can't reproduce/fix this issue if you don't provide some simple reproducer app. 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   

___
weld-issues mailing list
weld-issues@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/weld-issues

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-18 Thread JIRA
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Thomas Wöckinger commented on  WELD-2228 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
  Re: Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 
 
It seem's you are requesting the type MyImpl and not the Interface MyInterface! 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   

___
weld-issues mailing list
weld-issues@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/weld-issues

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-12 Thread Matej Novotny (JIRA)
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Matej Novotny commented on  WELD-2228 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
  Re: Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 
 
I am sorry, but it still doesn't blow up for me. 
I took the classes you have in steps to reproduce and made them into a library jar which I signed. Then I added this jar as a dependency to WAR (numberguess sample), where I used the beans in the very same way you described. And it simply works as expected. Also, I made double sure that the jar was added in its signed form. 
Could you maybe try some very simple scenario (or just what I described above^) using a clean Tomcat 8 and a self-signed key to sign the jar? Because I am starting to think the problem might be elsewhere and this way we could eliminate the possibility. 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   

___
weld-issues mailing list
weld-issues@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/weld-issues

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-08 Thread Matej Novotny (JIRA)
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Matej Novotny commented on  WELD-2228 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
  Re: Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 
 
Still unable to reproduce this I am afraid... 
Here is what I did: 
 

Download and prepare Tomcat 8
 

Take some WAR with Weld enabled functionality and added the beans you mentioned in steps to reproducer 
 

I took weld-numberguess example
 

Added those beans and made them used in the app
 
 
 

Signed the resulting war with a self-signed certificate 
 

Did something similar to what is described in this article
 
 
 

copy signed WAR to Tomcat folder and start the server
 

Test the app - it all works with no errors
 
 
Is any of the steps I took wrong compared to what you did? I might need more info on this as so far I cannot see the problem. Would you mind trying something similar to what I did? 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
  

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-08 Thread JIRA
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Thomas Wöckinger commented on  WELD-2228 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
  Re: Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 
 
It's happening in the standalone and in the WAR case (Tomcat V8). The code is running without security manager. 
To reproduce you have to sign the jar which contains the classes under test. 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   

___
weld-issues mailing list
weld-issues@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/weld-issues

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-08 Thread Matej Novotny (JIRA)
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Matej Novotny commented on  WELD-2228 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
  Re: Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 
 
Hello Thomas Wöckinger 
Do you think you could provide us with a reproducer? 
Also please clarify the structure of the deployment (WAR with a lib, standalone jar, ...). Have you tried this somewhere else than on Tomcat (SE, another server/servlet)? Do you run the app with security manager? 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.11#64026-sha1:78f6ec4) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   

___
weld-issues mailing list
weld-issues@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/weld-issues

[weld-issues] [JBoss JIRA] (WELD-2228) Selecting an interface of a signed jar can lead to a SecurityException

2016-09-07 Thread JIRA
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Thomas Wöckinger created an issue 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 Weld /  WELD-2228 
 
 
 
  Selecting an interface of a signed jar can lead to a SecurityException  
 
 
 
 
 
 
 
 
 

Issue Type:
 
  Bug 
 
 
 

Affects Versions:
 

 2.4.0.CR1, 2.3.5.Final 
 
 
 

Assignee:
 

 Unassigned 
 
 
 

Components:
 

 Proxies 
 
 
 

Created:
 

 07/Sep/16 8:04 AM 
 
 
 

Environment:
 
 
Tomcat 8 
 
 
 

Priority:
 
  Critical 
 
 
 

Reporter:
 
 Thomas Wöckinger 
 
 
 
 
 
 
 
 
 
 
The reason seems to be that the proxiedBeanType in ProxyFactory is Object.class 
Stacktrace 
Caused by: java.lang.RuntimeException: java.lang.SecurityException: class "my.package.MyImpl$1431353132$Proxy$_$$_WeldClientProxy"'s signer information does not match signer information of other classes in the same package at org.jboss.weld.util.bytecode.ClassFileUtils.toClass(ClassFileUtils.java:101) at org.jboss.weld.bean.proxy.ProxyFactory.createProxyClass(ProxyFactory.java:491) at org.jboss.weld.bean.proxy.ProxyFactory.getProxyClass(ProxyFactory.java:364) ... 152 more Caused by: