FWD » Core Development » Runtime Infrastructure

08/10/2017

03:56 PM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Committed revision 11416 added the security cache refresh functionality on Target>Refresh menu item. I checked that i... Sergey Ivanovskiy

10:11 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Greg Shah wrote:
> Once you have refreshed and logged off and back on, is there an issue? If not then we are OK.
Y... Sergey Ivanovskiy

10:00 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Sergey Ivanovskiy wrote:
> It seems that we didn't implement this menu to refresh the security cache. I will check t... Greg Shah

10:00 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

> Thus if a user account password is changed, then this user will not have an access to the system with this new chan... Greg Shah

09:53 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

It seems that we didn't implement this menu to refresh the security cache. I will check the old admin for this functi... Sergey Ivanovskiy

09:51 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Sergey,
As I recall there in a menu option to refresh the security cache in the old admin, without having to resta... Sergey Ivanovskiy

09:51 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Found that SecurityAdmin, SecurityManager have their own instances of SecurityCache. Are these instances must be poin... Sergey Ivanovskiy

08:48 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

We need to always hash the password on the FWD server side. Javascript is insecure and hashing there means that it c... Greg Shah

02:32 AM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Committed revision 11415 rolled back hashedPassword->password and changed password->plainPassword, added validators f... Sergey Ivanovskiy

08/09/2017

12:59 PM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Committed revision 11414 added plain password field to the data transfer object @UserDef@. I tried to use SHA1 implem... Sergey Ivanovskiy

08/08/2017

02:35 PM Feature #3222: rewrite admin console for native web (html5/css/javascript)

3222a was rebased over the latest trunk. The current rev becomes 11413. There were conflicts in @build.xml@, @build.g... Sergey Ivanovskiy

01:11 PM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Planning to rebase now. Sergey Ivanovskiy

01:00 PM Feature #3222: rewrite admin console for native web (html5/css/javascript)

Sergey, please rebase task branch 3222a to the latest trunk. Eric Faulhaber

07/17/2017

08:29 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

There are new options to load Let's Encrypt certificate and to use it for signing accounts and server certificates:
... Sergey Ivanovskiy

04:22 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > @SSLCertGenUtil@ input parameters were changed by this com... Sergey Ivanovskiy

03:02 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> @SSLCertGenUtil@ input parameters were changed by this commit 11160.
> It seems that the... Constantin Asofiei

07/15/2017

07:24 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

@SSLCertGenUtil@ input parameters were changed by this commit 11160.
It seems that the old input string was compact
... Sergey Ivanovskiy

06:01 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

The incorrect password was used. The key store entry 36 chars password was used instead of hotel-root alias private k... Sergey Ivanovskiy

05:08 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Committed rev 11159. Working to fix this program's flaw if the previous fresh run encrypted the CA private key, then ... Sergey Ivanovskiy

07/14/2017

12:36 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

This library is clear to use via @Option@ annotation, http://args4j.kohsuke.org/args4j/apidocs/org/kohsuke/args4j/Opt... Sergey Ivanovskiy

05:58 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Greg Shah wrote:
> I'm OK with the args4j usage so long as it can be properly managed using gradle dependencies and ... Constantin Asofiei