directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Stefan Kombrink (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (DIRSERVER-2004) Non-standard way of base64 calculation in ads-certificatePassword
Date Thu, 18 Sep 2014 13:03:34 GMT

    [ https://issues.apache.org/jira/browse/DIRSERVER-2004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14138883#comment-14138883
] 

Stefan Kombrink commented on DIRSERVER-2004:
--------------------------------------------

forgot to note that the '=' is just used for padding ie the saved base64 value seems to be
truncated by one char

> Non-standard way of base64 calculation in ads-certificatePassword
> -----------------------------------------------------------------
>
>                 Key: DIRSERVER-2004
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2004
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 2.0.0-M17
>         Environment: CentOs 6.5, JAVA OpenJRE 1.7.0
>            Reporter: Stefan Kombrink
>            Priority: Minor
>
> When using StartTLS authentication a certkeystore and a keystore password HHHHHHHH is
defined.
> It is set in
>      ads-keystoreFile: /etc/pki/tls/certs/keystore.jks
>      ads-certificatePassword: base64(HHHHHHHH)
> as to be found in the config file
>      vim /var/lib/apacheds-2.0.0_M17/default/conf/config.ldif
> Comparison of base64 values:
>  echo HHHHHHHH | /bin/base64 
> SEhISEhISEgK
>  cat /var/lib/apacheds-2.0.0_M17/default/conf/config.ldif | grep ads-certificatePassword
> ads-certificatePassword:: SEhISEhISEg=
> The keystore works okay, indicating, that the password is saved correctly.
> Just the suffix of the base64 value differs from what base64(coreutils package) computes.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message