Skip to content

Update security FATs to expect CWWKS1865W #34277

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Zech-Hein wants to merge 2 commits into
base: integration
Choose a base branch
from
+21 −4
Open

Update security FATs to expect CWWKS1865W #34277

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a31bd36
update aes password to use custom encryption key
Zech-Hein Mar 6, 2026
58425ab
registry.basic_fat add expected CWWKS1865W for passwords without cust…
Zech-Hein Mar 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions ...om.ibm.ws.security.client_fat/publish/clients/myTestClient/configs/client_aesPassword.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
Copyright (c) 2020 IBM Corporation and others.
Copyright (c) 2020, 2026 IBM Corporation and others.
All rights reserved. This program and the accompanying materials
are made available under the terms of the Eclipse Public License 2.0
which accompanies this distribution, and is available at
Expand All @@ -19,10 +19,12 @@

<application id="myCalc" name="BasicCalculatorClient" type="ear" location="BasicCalculatorClient.ear" />

<variable name="wlp.password.encryption.key" value="customEncryptionKey" />

<orb id="defaultOrb">
<clientPolicy.clientContainerCsiv2>
<layers>
<authenticationLayer user="user2" password="{aes}ARBy65pibvbPX/1iYmgWRTBNi8Xh1kAKrYlL8F2+2qRT7xRGDTc/GvOjgQs4SyOKmJuY53aMpjtD0YTT4ykbFbD3qKsi5DETQzkc2Qdqi5YdhtQrnhWsFst97XWhqILiWwD94uqXk638eZs=" />
<authenticationLayer user="user2" password="{aes}ARD8RSrwJe7SG6X9zBVJIUi0FPTCH6g/2dTc989kzFXjjaAj+TzMOaMntmNSFG5nDfAGnutvKS5Ra5+Whf1xghEG0GRja6SSnF86MeqXBq0dj4LKEDEJr/v3H8gwsr2f+1D9tSOxPwQBan0=" />
<!-- This is a client configuration file selected to explicitly configure the default SSL config to
make sure the default SSL config works when configured explicitly -->
<transportLayer sslRef="defaultSSLConfig" />
Expand Down
19 changes: 17 additions & 2 deletions ...s.security.registry.basic_fat/fat/src/com/ibm/ws/security/registry/basic/fat/FATTest.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,6 +69,8 @@ public class FATTest {
private static boolean CWWKS1864wAlreadyLoggedForHash = false;
/** CWWKS1864w is only logged one time for AES-128 {aes} passwords per server start */
private static boolean CWWKS1864wAlreadyLoggedForAES = false;
/** CWWKS1865w is only logged one time for {aes} passwords without a custom encryption key per server start */
private static boolean CWWKS1865wAlreadyLoggedForAES = false;


@ClassRule
Expand Down Expand Up @@ -189,8 +191,13 @@ public void checkPasswordEncodedUsingAES128() throws Exception {
CWWKS1864wAlreadyLoggedForAES = true;
}

// Add CWWKS1865W for AES passwords without custom encryption key
expectedErrors.add(CWWKS1865W_AES_NO_CUSTOM_KEY_WARNING);
//Note: CWWKS1865W will be output after CWWKS1864W
if (!!!CWWKS1865wAlreadyLoggedForAES) {
assertNotNull("AES password without custom encryption key should cause CWWKS1865W",
server.waitForStringInLog(CWWKS1865W_AES_NO_CUSTOM_KEY_WARNING));
expectedErrors.add(CWWKS1865W_AES_NO_CUSTOM_KEY_WARNING);
CWWKS1865wAlreadyLoggedForAES = true;
}

assertEquals("Authentication should succeed.",
"defaultUser", servlet.checkPassword("defaultUser", password));
Expand Down Expand Up @@ -231,6 +238,14 @@ public void checkPasswordEncodedUsingAES256() throws Exception {
expectedErrors.add(CWWKS1864W_WEAK_ALGORITHM_WARNING);
CWWKS1864wAlreadyLoggedForAES = true;
}

//Note: CWWKS1865W will be output after CWWKS1864W
if (!!!CWWKS1865wAlreadyLoggedForAES) {
assertNotNull("AES password without custom encryption key should cause CWWKS1865W",
server.waitForStringInLog(CWWKS1865W_AES_NO_CUSTOM_KEY_WARNING));
expectedErrors.add(CWWKS1865W_AES_NO_CUSTOM_KEY_WARNING);
CWWKS1865wAlreadyLoggedForAES = true;
}
}

String password = "superAES256password";
Expand Down