Several tests from WS-Trust and Santuario XML Security are failing on FIPS machine #1359
Conversation
… santuario-xmlsec,ws-trust
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| this.getClass().getClassLoader().getResource("servicestore.jks").openStream(), | ||
| "sspass".toCharArray()); | ||
| this.getClass().getClassLoader().getResource("myservice-keystore.jks").openStream(), | ||
| "myservice-keystore-password".toCharArray()); |
Check failure
Code scanning / CodeQL
Hard-coded credential in API call Critical
| @@ -86,8 +86,8 @@ | |||
| @POST | |||
| @Path("/{encryption}/decrypt") | |||
| public byte[] decrypt(byte[] encrypted, @PathParam("encryption") Encryption encryption) throws Exception { | |||
| Key privateKey = keyStore.getKey("myservicekey", "skpass".toCharArray()); | |||
| return encryption.decrypt(encrypted, "http://www.w3.org/2001/04/xmlenc#aes128-cbc", privateKey); | |||
| Key privateKey = keyStore.getKey("myservice", "myservice-keystore-password".toCharArray()); | |||
Check failure
Code scanning / CodeQL
Hard-coded credential in API call Critical
| X509Certificate cert = (X509Certificate) keyStore.getCertificate("myclientkey"); | ||
| this.getClass().getClassLoader().getResource("myclient-keystore.jks").openStream(), | ||
| "myclient-keystore-password".toCharArray()); | ||
| Key key = keyStore.getKey("myclient", "myclient-keystore-password".toCharArray()); |
Check failure
Code scanning / CodeQL
Hard-coded credential in API call Critical
| Key key = keyStore.getKey("myclientkey", "ckpass".toCharArray()); | ||
| X509Certificate cert = (X509Certificate) keyStore.getCertificate("myclientkey"); | ||
| this.getClass().getClassLoader().getResource("myclient-keystore.jks").openStream(), | ||
| "myclient-keystore-password".toCharArray()); |
Check failure
Code scanning / CodeQL
Hard-coded credential in API call Critical
| "cspass".toCharArray()); | ||
| X509Certificate cert = (X509Certificate) keyStore.getCertificate("myclientkey"); | ||
| this.getClass().getClassLoader().getResource("myclient-keystore.jks").openStream(), | ||
| "myclient-keystore-password".toCharArray()); |
Check failure
Code scanning / CodeQL
Hard-coded credential in API call Critical
|
@ppalaga I added backport to 3.8 labe; as I think that this PR should be backorted. I'll prepare a PR. |
fixes #1358