Skip to content

In FIPS environment password must be at least 14 characters - #558

Merged
jtnord merged 6 commits into
jenkinsci:masterfrom
olamy:password-length-fips-mode
Sep 17, 2024
Merged

In FIPS environment password must be at least 14 characters#558
jtnord merged 6 commits into
jenkinsci:masterfrom
olamy:password-length-fips-mode

Conversation

@olamy

@olamy olamy commented Sep 12, 2024

Copy link
Copy Markdown
Member

Signed-off-by: Olivier Lamy [email protected]

Testing done

Submitter checklist

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • Ensure you have provided tests - that demonstrates feature works or fixes the issue

return "symbol-id-card";
}

public FormValidation doCheckPassword(@QueryParameter String password) {

Check warning

Code scanning / Jenkins Security Scan

Stapler: Missing permission check

Potential missing permission check in DescriptorImpl#doCheckPassword
Signed-off-by: Olivier Lamy <[email protected]>
Signed-off-by: Olivier Lamy <[email protected]>
@olamy
olamy marked this pull request as ready for review September 12, 2024 23:38
@olamy
olamy requested a review from a team as a code owner September 12, 2024 23:38
@olamy olamy added the bug label Sep 12, 2024
@batmat batmat changed the title In FIPS environement password must be at least 14 characters In FIPS environment password must be at least 14 characters Sep 13, 2024
…asswordCredentialsImplFIPSTest.java

Co-authored-by: James Nord <[email protected]>
Signed-off-by: Olivier Lamy <[email protected]>
olamy added a commit to olamy/kubernetes-credentials-plugin that referenced this pull request Sep 17, 2024
snapshot.setUsernameSecret(credentials.isUsernameSecret());
return snapshot;
} catch (Descriptor.FormException e) {
throw new RuntimeException(e);

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

weired. I was expecting the method to throw be able to throw an IOException as many credentials can (and are) documented to do that. doc

@jtnord
jtnord merged commit 81ef426 into jenkinsci:master Sep 17, 2024
@olamy
olamy deleted the password-length-fips-mode branch September 17, 2024 09:13
@basil

basil commented Sep 17, 2024

Copy link
Copy Markdown
Member

Breaks hudson.plugins.emailext.MailAccountFIPSTest#testFormValidationForInsecureAuth, hudson.plugins.git.FIPSModeUrlCheckTest#testGitSCMSourceCheck, and org.jenkinsci.plugins.kubernetes.credentials.OpenShiftBearerTokenCredentialWithFIPSTest in https://ci.jenkins.io/job/Tools/job/bom/job/PR-3588/2/

MarkEWaite added a commit to MarkEWaite/git-plugin that referenced this pull request Sep 17, 2024
jenkinsci/credentials-plugin#558 shows that
there are cases where a longer password is better in the test.
MarkEWaite added a commit to jenkinsci/git-plugin that referenced this pull request Sep 17, 2024
jenkinsci/credentials-plugin#558 shows that
there are cases where a longer password is better in the test.
olamy added a commit to olamy/email-ext-plugin that referenced this pull request Sep 18, 2024
slide pushed a commit to jenkinsci/email-ext-plugin that referenced this pull request Sep 24, 2024
MarkEWaite added a commit to jenkinsci/git-client-plugin that referenced this pull request Sep 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants