Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-3009

incorrect error message when SSL keystore password checking fails

    XMLWordPrintable

Details

    Description

      we have code that goes:

      if (!isPasswordCorrect())

      { throw new IOException("password was incorrect") }

      but isPasswordCorrect can return false for more reasons than that. it logs the specific reason to debug level.

      instead, it should throw the specific exception itself so that the user can see exactly whats going wrong. this sort of error should never be logged to debug.

      the method is SSLUtils.isCorrectKeystorePassword

      it is called in two places. from the WebServer and from EditServerSettingsAction - used for validation. The validation xml has the same problem. it has a "incorrect password" message regardless of why it returned false.

      Attachments

        Activity

          People

            Unassigned Unassigned
            gcrain Geoff Crain (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: