[KNOX-2200] DefaultKeystoreService can lose entries under concurrent access

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4.0
• Assignee: Kevin Risden
• Reporter: Kevin Risden
• Created: 27/Jan/20 16:30
• Updated: 08/Feb/20 20:56
• Resolved: 27/Jan/20 18:28

Description

DefaultKeystoreService can lose entires under concurrent access due to read then write synchronization issues. There are cases where the keystore is read, modified and then written back. This is not synchronized or handled with a lock.

Issue Links

• relates to: KNOX-1881 DefaultKeystoreService should use Java NIO API locking as well
• relates to: KNOX-1917 DefaultKeystoreService should use a shared read lock
• links to: GitHub Pull Request #243