Hi
I've backported the routine to validate certificate name, and I've made
a patch (attached).
I'm not sure it's a good idea apply the patch, it can break programs
that connect with bad hostnames (ips, host in /etc/hostname, etc)
Description: Validates the hostname requested is the same in the
Hi
I've made a patch (attached)
It's basically the same patch i've submitted to commons-httpclient
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692442 ),
This patch is tested in commons-httpclient but untested in axis (sorry)
Description: Validates the hostname requested is the same in
Hi Mike,
I don't understand what you expect from me.
I've uploaded the patches to the BTS, I don't know what next steep is.
I suppose a maintainer would pick it from there.
If there's something I can do let me know.
Thanks,
Alberto
El jue, 22-11-2012 a las 04:00 -0500, Michael Gilbert
El jue, 22-11-2012 a las 04:00 -0500, Michael Gilbert escribió:
I've backported the routine to validate certificate name, and I've made
a patch (attached).
I'm not sure it's a good idea apply the patch, it can break programs
that connect with bad hostnames (ips, host in /etc/hostname,
Here is the patch posted to upstream:
https://issues.apache.org/jira/browse/HTTPCLIENT-1265
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers.
Please use
debian-j...@lists.debian.org for discussions and
patch posted upstream:
https://issues.apache.org/jira/browse/AXIS-2883
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers.
Please use
debian-j...@lists.debian.org for discussions and questions.
Hi,
I've uploaded the two packages to mentors.debian.net.
We must solve the two bugs at the same time because axis uses
commons-httpclient.
Upstream seems End-of-life and rejected the patches.
El mié, 05-12-2012 a las 16:43 +0100, Andreas Tille escribió:
Hi,
seems the package is ready for
, Andreas Tille escribió:
Hi Alberto,
On Wed, Dec 05, 2012 at 06:01:51PM +0100, Alberto Fernández wrote:
I've uploaded the two packages to mentors.debian.net.
We must solve the two bugs at the same time because axis uses
commons-httpclient.
I guess you mean bug #692442, right
Hi All,
I've prepared the patch with the problem pointed by David fixed (thanks
David). It also fixes a bug related to wildcard certificates.
The first patch is backported from httpclient 4.0 and apache synapse.
This second patch backports some fixes from httpclient 4.2
The patch differ a lot
Description: Fixed CN extraction from DN of X500 principal and wildcard validation
commons-httpclient (3.1-10.2) unstable; urgency=low
* Fixed CN extraction from DN of X500 principal and wildcard validation
Author: Alberto Fernández MartÃnez inf...@gmail.com
Origin: other
Bug-Debian:
Description: Fixed CN extraction from DN of X500 principal and wildcard validation
axis (1.4-16.2) unstable; urgency=low
* Fixed CN extraction from DN of X500 principal and wildcard validation
Author: Alberto Fernández MartÃnez inf...@gmail.com
Origin: other
Bug-Debian:
volunteer to sponsor your
new version if you confirm that this is needed to finally fix the issue.
Kind regards
Andreas.
On Thu, Dec 06, 2012 at 01:49:07PM +0100, Alberto Fernández wrote:
Hi All,
I've prepared the patch with the problem pointed by David fixed (thanks
David
Hi
I've reopened the two bugs.
The first patch was incomplete, as pointed by David and by other bug
i've found reviewing the code.
The bug pointed by David can occur in some rare cases where the CA
issues malformed certificates. It's rare, but there are may CA...
The other bug it's about
Hi.
Both patches attached at upstream JIRA and reopened HTTPCLIENT-1265.
Waiting for response.
Kind regards
Alberto
__
This is the maintainer address of Debian's Java team
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers.
Please use
debian-j...@lists.debian.org for
Hi Tobias
Here's a testcase.
In sid it works fine, but if I use the jars provided in testing it
fails.
Important: the pdf file is protected , so it's necesary bouncycastle
to decrpyt it. Normal pdf files don't fail because they don't need
bouncycastle.
Attached sample pdf and sample java that
Hie Tobias and Niels
I've upload to the BTS a testcase for the bug.
It's a protected pdf sample file and a simple java program that counts
the number of pages of a PDF.
It works fine in sid and fails in testing.
Grettings
Alberto
__
This is the maintainer address of Debian's Java team
Hi
The patch is applied upstream:
http://svn.apache.org/viewvc?view=revisionrevision=1422573
http://svn.apache.org/repos/asf/httpcomponents/oac.hc3x/trunk
Kind Regars
Alberto
__
This is the maintainer address of Debian's Java team
17 matches
Mail list logo