[jira] [Created] (RAMPART-445) Expired certificates in rampart project

Discussion:

Svetoslav ILIEV (JIRA)

2018-11-06 14:28:00 UTC

Svetoslav ILIEV created RAMPART-445:
---------------------------------------

Summary: Expired certificates in rampart project
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Fix For: 1.6.2

We observed expired certificates in Apache Rampart project located in

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Could you please renew the expired certificate?

Best Regards,

Svetoslav ILIEV

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-***@axis.apache.org
For additional commands, e-mail: java-dev-***@axis.apache.org

Svetoslav ILIEV (JIRA)

2018-11-06 15:26:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Svetoslav ILIEV updated RAMPART-445:
------------------------------------
Description:
We observed expired certificates in Apache Rampart project located in

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

was:
We observed expired certificates in Apache Rampart project located in

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Could you please renew the expired certificate?

Best Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.6.2
We observed expired certificates in Apache Rampart project located in
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-***@axis.apache.org
For additional commands, e-mail: java-dev-***@axis.apache.org

Svetoslav ILIEV (JIRA)

2018-11-06 19:56:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Svetoslav ILIEV updated RAMPART-445:
------------------------------------
Description:
We observed expired certificates in Apache Rampart project. Keystores with expired certificates are located in:

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

was:
We observed expired certificates in Apache Rampart project located in

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.6.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Svetoslav ILIEV (JIRA)

2018-11-06 19:57:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Svetoslav ILIEV updated RAMPART-445:
------------------------------------
Description:
We observed expired certificates in Apache Rampart project. Keystores with expired certificates are located in:

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Other versions are also affected.

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

was:
We observed expired certificates in Apache Rampart project. Keystores with expired certificates are located in:

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.6.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other versions are also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Svetoslav ILIEV (JIRA)

2018-11-06 19:59:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Svetoslav ILIEV updated RAMPART-445:
------------------------------------
Description:
We observed expired certificates in Apache Rampart project. Keystores with expired certificates are located in:

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Other Rampart versions might be also affected.

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

was:
We observed expired certificates in Apache Rampart project. Keystores with expired certificates are located in:

<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks

and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks

Other versions are also affected.

Could you please renew the expired certificates?

Best Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.6.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Andreas Veithen (JIRA)

2018-11-06 20:11:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16677259#comment-16677259 ]

Andreas Veithen commented on RAMPART-445:
-----------------------------------------

This was fixed by r1837550 and r1837559.

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.6.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Andreas Veithen (JIRA)

2018-11-06 20:12:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andreas Veithen resolved RAMPART-445.
-------------------------------------
Resolution: Fixed
Fix Version/s: (was: 1.6.2)
1.7.2

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.7.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Svetoslav ILIEV (JIRA)

2018-11-07 12:45:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16678165#comment-16678165 ]

Svetoslav ILIEV edited comment on RAMPART-445 at 11/7/18 12:44 PM:
-------------------------------------------------------------------

Hi Andreas Veithen,

Thanks for your quick response!

I am curious about AOP solution introduced in version 1.7.x revisions r1837550 and r1837559.

Why the byte code manipulation via Aspects was preferred as solution instead of regenerating expired certificates?

What is the intention here?

Warm Regards,

Svetoslav ILIEV

was (Author: slaviliev):
Hi Andreas,

Thanks for your quick response!

I am curious about AOP solution introduced in version 1.7.x revisions r1837550 and r1837559.

Why the byte code manipulation via Aspects was preferred as solution instead of regenerating expired certificates?

What is the intention here?

Warm Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.7.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Svetoslav ILIEV (JIRA)

2018-11-07 12:45:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16678165#comment-16678165 ]

Svetoslav ILIEV commented on RAMPART-445:
-----------------------------------------

Hi Andreas,

Thanks for your quick response!

I am curious about AOP solution introduced in version 1.7.x revisions r1837550 and r1837559.

Why the byte code manipulation via Aspects was preferred as solution instead of regenerating expired certificates?

What is the intention here?

Warm Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.7.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Svetoslav ILIEV (JIRA)

2018-11-07 12:45:01 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16678165#comment-16678165 ]

Svetoslav ILIEV edited comment on RAMPART-445 at 11/7/18 12:44 PM:
-------------------------------------------------------------------

Hi [~veithen],

Thanks for your quick response!

I am curious about AOP solution introduced in version 1.7.x revisions r1837550 and r1837559.

Why the byte code manipulation via Aspects was preferred as solution instead of regenerating expired certificates?

What is the intention here?

Warm Regards,

Svetoslav ILIEV

was (Author: slaviliev):
Hi Andreas Veithen,

Thanks for your quick response!

I am curious about AOP solution introduced in version 1.7.x revisions r1837550 and r1837559.

Why the byte code manipulation via Aspects was preferred as solution instead of regenerating expired certificates?

What is the intention here?

Warm Regards,

Svetoslav ILIEV

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.7.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV

Andreas Veithen (JIRA)

2018-11-08 23:02:00 UTC

Permalink

[ https://issues.apache.org/jira/browse/RAMPART-445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16680553#comment-16680553 ]

Andreas Veithen commented on RAMPART-445:
-----------------------------------------

There are two basic principles or best practices relevant here:

* Sources should consist only of human written files. If something needs to be generated, it should be generated during the build process, not included in the sources.
* Unit tests should be deterministic and not depend on the current time.

Therefore the right solution here would be to generate those certificates during the build process (so that they always have a validity that covers the test execution). However, I couldn't figure out how those certificates and corresponding key material was originally generated and/or how to generate them during the build process. So the next best solution was to effectively disable validation of the expiry date.

Post by Svetoslav ILIEV (JIRA)
Expired certificates in rampart project
---------------------------------------
Key: RAMPART-445
URL: https://issues.apache.org/jira/browse/RAMPART-445
Project: Rampart
Issue Type: Bug
Components: rampart-integration
Affects Versions: 1.6.2
Reporter: Svetoslav ILIEV
Priority: Major
Fix For: 1.7.2
<rampart_root>\modules\rampart-integration\src\test\resources\rahas\rahas-sts.jks
and <rampart_root>\modules\rampart-integration\src\test\resources\rahas\sec.jks
Other Rampart versions might be also affected.
Could you please renew the expired certificates?

Best Regards,
Svetoslav ILIEV