Bug 1033343 - Do not log passwords at any level
Summary: Do not log passwords at any level
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: JBoss Enterprise Application Platform 6
Classification: JBoss
Component: HornetQ
Version: 6.1.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: One-off release
Assignee: Justin Bertram
QA Contact: Miroslav Novak
Russell Dickenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-11-21 21:52 UTC by Justin Bertram
Modified: 2019-05-20 11:06 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
PATCH NAME: BZ-1033343 PRODUCT NAME: JBoss Enterprise Application Platform (EAP) VERSION: 6.1.1 SHORT DESCRIPTION: HornetQ 2.3.5.Final needs the fix for HORNETQ-1281 LONG DESCRIPTION: Currently HornetQ logs passwords for Netty keystore/trustore and message inflow under certain conditions. MANUAL INSTALL INSTRUCTIONS: Backup and remove the following files: $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/hornetq-core-client-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/hornetq-ra-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/module.xml $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/module.xml $JBOSS_HOME/bin/client/jboss-client.jar Extract the patched files by either: Using unzip: unzip -d $JBOSS_HOME/ bz-1033343.zip Or by extracting the files from the zip to the following locations: $JBOSS_HOME/mffffodules/system/layers/base/org/hornetq/main/hornetq-core-client-2.3.5.BZ1033343.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/hornetq-ra-2.3.5.BZ1033343.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/module.xml $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/module.xml $JBOSS_HOME/bin/client/jboss-client.jar Instructions to uninstall: Restore the following files that were backed up before the patch was installed: $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/hornetq-core-client-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/hornetq-ra-2.3.5.Final-redhat-2.jar $JBOSS_HOME/modules/system/layers/base/org/hornetq/main/module.xml $JBOSS_HOME/modules/system/layers/base/org/hornetq/ra/main/module.xml $JBOSS_HOME/bin/client/jboss-client.jar COMPATIBILITY: N/A DEPENDENCIES: N/A SUPERSEDES: N/A SUPERSEDED BY: N/A CREATOR: Justin Bertram DATE: 21 of November 2013
Clone Of:
Environment:
Last Closed: 2014-09-02 13:19:34 UTC
Type: Support Patch


Attachments (Terms of Use)
initial patch distribution (6.27 MB, application/zip)
2013-11-21 22:50 UTC, Justin Bertram
no flags Details

Description Justin Bertram 2013-11-21 21:52:16 UTC
This is a patch incorporating https://bugzilla.redhat.com/show_bug.cgi?id=1031816

Comment 1 Justin Bertram 2013-11-21 22:50:31 UTC
Created attachment 827476 [details]
initial patch distribution


Note You need to log in before you can comment on or make changes to this bug.