Build: #2770 was successful Scheduled with changes by 4 people

Stages & jobs

  1. Build and Package

  2. Copy to Website

Build result summary

Details

Completed
Queue duration
< 1 second
Duration
13 minutes
Labels
None
Revision
f1571a7329f73a433367951afa382d8dde8148b5
Total tests
1909
Successful since
#2725 ()

Tests

Code commits

Author Commit Message Commit date
daryl herzmann daryl herzmann f1571a7329f73a433367951afa382d8dde8148b5 Merge pull request #3357 from guusdk/OF-3122_Stop-enabling-cn-mapping-by-default
OF-3122: Stop using Common Name based identities by default
Guus der Kinderen Guus der Kinderen 293e9ace80946e440dc398b458c0bd6ba8db427d OF-3122: Stop using Common Name based identities by default
When dealing with certificates used for authentication (SASL EXTERNAL / mutual authentication) Openfire should no longer offer, by default, the functionality to obtain an identify from Common Name attributes.

Common Name usage was supposedly phased on in 2017 and CAB Forum compliant CAs do not allow users to arbitrarily pick Subject RDNs at all.

Furthermore, CAB Forum CAs always include a SAN as nothing is supposed to be using CommonName at all.

This commit removes this functionality from being enabled _by default_. It can be restored by adding the mapper disabled by this commit in the relevant properties:

- `provider.serverCertIdentityMap.classList` (for server-to-server / federation)
- `provider.clientCertIdentityMap.classList` (for client based mutual auth)
Guus der Kinderen Guus der Kinderen be7f86a8a4bbeb220bb9b191f07a464dea5294b0 OF-3122: Update test fixture to not use a cert with only a Common Name based identity
As Openfire no longer, by default, uses Common Name based identies (see the previous commit), our tests should no longer use certificates that are based on them.

This commit changes a certificate used for testing, by adding a Subject Alternate Name.
Guus der Kinderen Guus der Kinderen 6b97543cab310c6979dce8a6e66f9a804732b212 OF-3122: Adjust test to no longer expect Common Name identities to be returned by default
Guus der Kinderen Guus der Kinderen 5833b2d7a6f8648275581f9fe88e819b35736b28 OF-1927: Guard against null values returning 'unavailble' rather than 'not fetched'

Jira issues

IssueDescriptionStatus
3 more issues…
Unknown Issue TypeOF-1927Could not obtain issue details from Jira
Unknown Issue TypeOF-3122Could not obtain issue details from Jira
Unknown Issue TypeOF-3237Could not obtain issue details from Jira
Unknown Issue TypeOF-3238Could not obtain issue details from Jira
Unknown Issue TypeOF-3239Could not obtain issue details from Jira

Shared artifacts

Artifact File size
.deb files 71 MB