[QPID-5927] Broker does not support whitespace in passwords in SSL password file

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.28, 0.30
• Fix Version/s: 0.31
• Component/s: C++ Broker
• Assignee: Gordon Sim
• Reporter: Chris Richardson
• Created: 25/Jul/14 10:35
• Updated: 19/Mar/15 12:22
• Resolved: 10/Nov/14 13:33

Description

qpid/sys/ssl/util.cpp reads passwords from the password file with
...
std::string password;
file >> password;
...

The stream operator stops reading at the first whitespace character so a password of eg: "this is a password" (considered valid by certutil) will not be properly parsed by the broker.

Possibly use std::getline(file, password); or a stream manipulator instead.