[SOLR-15961] PKIAuthenticationPlugin.parseCipher is too lenient, causing unnecessary authentication errors

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 9.0, 8.11.2, main (10.0)
• Assignee: Tomas Eduardo Fernandez Lobbe
• Reporter: Tomas Eduardo Fernandez Lobbe
• Created: 28/Jan/22 17:33
• Updated: 12/May/22 00:35
• Resolved: 02/Feb/22 01:17

Description

It will accept an input SolrAuth header as valid with an invalid/outdated public key as long as the output of CryptoKeys.decryptRSA ends with a space followed by a number. It will interpret the number as a (very small) timestamp, which will cause the request to fail with 401, instead of re-fetching the public key from the remote host.

Issue Links

• links to: GitHub Pull Request #575