JavaMailContainer is broken for all password not consisting of only lowercase characters
---------------------------------------------------------------------------------------- Key: OFBIZ-543 URL: http://issues.apache.org/jira/browse/OFBIZ-543 Project: OFBiz (The Open for Business Project) Issue Type: Bug Components: framework Affects Versions: SVN trunk Reporter: Stefan Huehner Priority: Critical Attachments: ofbiz_mail1.diff Hi, after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=all ]
Stefan Huehner updated OFBIZ-543: --------------------------------- Attachment: ofbiz_mail1.diff > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=all ]
Jacques Le Roux reassigned OFBIZ-543: ------------------------------------- Assignee: Jacques Le Roux > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=comments#action_12458285 ]
Jacques Le Roux commented on OFBIZ-543: --------------------------------------- This patch seems good to me. If nobody complains I'm ready to apply it... > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=comments#action_12459112 ]
Jacques Le Roux commented on OFBIZ-543: --------------------------------------- OK for everybody (no response is an OK here...) ? > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=comments#action_12459114 ]
Jacopo Cappellato commented on OFBIZ-543: ----------------------------------------- I'm not an expert of this area but it looks good. There is just one little formatting issue: one tab in the first code chunk... > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=comments#action_12459128 ]
Jacques Le Roux commented on OFBIZ-543: --------------------------------------- Jacopo, Yes I saw the tab, waiting a little bit more... > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=comments#action_12459183 ]
David E. Jones commented on OFBIZ-543: -------------------------------------- This fix looks fine to me, and just fixes what looks like it really is a bug. > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
In reply to this post by Nicolas Malin (Jira)
[ http://issues.apache.org/jira/browse/OFBIZ-543?page=all ]
Jacques Le Roux closed OFBIZ-543. --------------------------------- Fix Version/s: SVN trunk Resolution: Fixed Thanks Stefan, Your patch is in OFBiz revision: 488137 > JavaMailContainer is broken for all password not consisting of only lowercase characters > ---------------------------------------------------------------------------------------- > > Key: OFBIZ-543 > URL: http://issues.apache.org/jira/browse/OFBIZ-543 > Project: OFBiz (The Open for Business Project) > Issue Type: Bug > Components: framework > Affects Versions: SVN trunk > Reporter: Stefan Huehner > Assigned To: Jacques Le Roux > Priority: Critical > Fix For: SVN trunk > > Attachments: ofbiz_mail1.diff > > > Hi, > after 2 hours of debugging the JavaMailContainer and working with javamail properties and network traces i noticed that when creating the JavaMail session the Container transforms all property names and ALL property values (including the password) to lowercase. Thus authentication fails if the password does contain uppercase characters. > The attached patch removes the conversion of property values to lowercase altogether, which fixes the issue. As i see no pressing issue to convert other property-values to lowercase i chose this way instead of excluding only selected properties. > The second change to the Container prints out the Text of the exception which has occured when reporting that the mail store could not be opened to give the user a clue about the source (i.e. SSL trust chain verification problem). -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira |
Free forum by Nabble | Edit this page |