portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From j...@apache.org
Subject [jira] Updated: (JS1-419) [FIX] TurbineUserManagement - encryptPassword() - Stream not flushed
Date Fri, 02 Apr 2004 18:36:46 GMT
The following issue has been updated:

    Updater: Mark Orciuch (mailto:morciuch@apache.org)
       Date: Fri, 2 Apr 2004 10:36 AM
    Changes:
             assignee changed from Jetspeed Developer Mailing List
             description changed from In org.apache.jetspeed.services.security.turbine.TurbineUserManagement
in Method encryptPassword() the OutputStream is not flushed.

The result is that the returned encrypted passwordstring is not complete and i
think it may vary on different systems.


/* CODE from current CVS: */
MessageDigest md = MessageDigest.getInstance(passwordsAlgorithm);
byte[] digest = md.digest(password.getBytes("UTF-8"));
ByteArrayOutputStream bas = new ByteArrayOutputStream(digest.length +
digest.length / 3 + 1);
OutputStream encodedStream = MimeUtility.encode(bas, "base64");
encodedStream.write(digest);
return bas.toString();

/* FIX: */
encodedStream.flush(); to In org.apache.jetspeed.services.security.turbine.TurbineUserManagement
in Method encryptPassword() the OutputStream is not flushed.

The result is that the returned encrypted passwordstring is not complete and i
think it may vary on different systems.


/* CODE from current CVS: */
MessageDigest md = MessageDigest.getInstance(passwordsAlgorithm);
byte[] digest = md.digest(password.getBytes("UTF-8"));
ByteArrayOutputStream bas = new ByteArrayOutputStream(digest.length +
digest.length / 3 + 1);
OutputStream encodedStream = MimeUtility.encode(bas, "base64");
encodedStream.write(digest);
return bas.toString();

/* FIX: */
encodedStream.flush();
             environment changed from Operating System: All
Platform: All to Operating System: All
Platform: All
             priority changed to Blocker
             Fix Version changed to 1.5
    ---------------------------------------------------------------------
For a full history of the issue, see:

  http://issues.apache.org/jira/browse/JS1-419?page=history

---------------------------------------------------------------------
View the issue:
  http://issues.apache.org/jira/browse/JS1-419

Here is an overview of the issue:
---------------------------------------------------------------------
        Key: JS1-419
    Summary: [FIX] TurbineUserManagement - encryptPassword() - Stream not flushed
       Type: Bug

     Status: Resolved
   Priority: Blocker
 Resolution: FIXED

    Project: Jetspeed
 Components: 
             Security
   Fix Fors:
             1.5
   Versions:
             1.4b4

   Assignee: 
   Reporter: Florian Kamke

    Created: Mon, 17 Nov 2003 3:36 PM
    Updated: Fri, 2 Apr 2004 10:36 AM
Environment: Operating System: All
Platform: All

Description:
In org.apache.jetspeed.services.security.turbine.TurbineUserManagement
in Method encryptPassword() the OutputStream is not flushed.

The result is that the returned encrypted passwordstring is not complete and i
think it may vary on different systems.


/* CODE from current CVS: */
MessageDigest md = MessageDigest.getInstance(passwordsAlgorithm);
byte[] digest = md.digest(password.getBytes("UTF-8"));
ByteArrayOutputStream bas = new ByteArrayOutputStream(digest.length +
digest.length / 3 + 1);
OutputStream encodedStream = MimeUtility.encode(bas, "base64");
encodedStream.write(digest);
return bas.toString();

/* FIX: */
encodedStream.flush();


---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.

If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa

If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org


Mime
View raw message