Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-8254

[Broker-J] Illegal ascii characters are used in keystore passwords

    XMLWordPrintableJSON

    Details

      Description

      Illegal keystore password characters are used on creation of AutoGeneratedSelfSignedKeyStoreImpl and NonJavaKeyStoreImpl:

      char[] chars = new char[64];
      RANDOM.nextBytes(bytes);
      StandardCharsets.US_ASCII.decode(ByteBuffer.wrap(bytes)).get(chars);
      inMemoryKeyStore.load(null, chars);
      inMemoryKeyStore.setKeyEntry("1", _privateKey, chars, certs);
      

        Attachments

          Activity

            People

            • Assignee:
              orudyy Alex Rudyy
              Reporter:
              orudyy Alex Rudyy
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: