Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-7778

PasswordUtil#isPlainTextPassword doesn't validate PBKDF2 scheme

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.10.0, 1.9.8, 1.8.13
    • security-spi
    • None

    Description

      Support for PBKDF2 was added quite a while back with OAK-697 but it seems it's not really usable due to password validation. PasswordUtil#isPlainTextPassword seems to think PBKDF2 is plain text, so it will not allow any passwords to be set.

      Attachments

        Issue Links

          relates to

          New Feature - A new feature of the product, which has yet to be developed. OAK-697 Security: support for PBKDF2 password hashing

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              stillalex Alex Deparvu
              stillalex Alex Deparvu
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: