[JS1-419] [FIX] TurbineUserManagement - encryptPassword() - Stream not flushed

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.4b4
• Fix Version/s: 1.5
• Component/s: Security
• Environment: Operating System: All; Platform: All
• Bugzilla Id: 24752
• Assignee: Unassigned
• Reporter: Florian Kamke
• Created: 17/Nov/03 23:36
• Updated: 02/Apr/04 18:36
• Resolved: 02/Apr/04 18:36

Description

In org.apache.jetspeed.services.security.turbine.TurbineUserManagement
in Method encryptPassword() the OutputStream is not flushed.

The result is that the returned encrypted passwordstring is not complete and i
think it may vary on different systems.

/* CODE from current CVS: */
MessageDigest md = MessageDigest.getInstance(passwordsAlgorithm);
byte[] digest = md.digest(password.getBytes("UTF-8"));
ByteArrayOutputStream bas = new ByteArrayOutputStream(digest.length +
digest.length / 3 + 1);
OutputStream encodedStream = MimeUtility.encode(bas, "base64");
encodedStream.write(digest);
return bas.toString();

/* FIX: */
encodedStream.flush();