Hi,

This is because, local transport is added for the oauth admin services'
service.xml.
Comparing the sources, this has been added in 4.0.3 version.

Johann, do you have any idea why "local" was added under transports for
these admin services?
Can you please look into fixing this test failure?

Thanks,
Hasini.

On Fri, Oct 26, 2012 at 10:38 AM, Samisa Abeysinghe <[email protected]> wrote:

> [2012-10-25 21:51:34,515] ERROR
> {org.wso2.carbon.integration.framework.utils.InputStreamHandler} -  Problem
> reading the [inputStream] due to: Stream closed
> java.io.IOException: Stream closed
>         at
> java.io.BufferedInputStream.getBufIfOpen(BufferedInputStream.java:145)
>         at java.io.BufferedInputStream.read1(BufferedInputStream.java:255)
>         at java.io.BufferedInputStream.read(BufferedInputStream.java:317)
>         at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:264)
>         at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:306)
>         at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:158)
>         at java.io.InputStreamReader.read(InputStreamReader.java:167)
>         at java.io.BufferedReader.fill(BufferedReader.java:136)
>         at java.io.BufferedReader.readLine(BufferedReader.java:299)
>         at java.io.BufferedReader.readLine(BufferedReader.java:362)
>         at
> org.wso2.carbon.integration.framework.utils.InputStreamHandler.run(InputStreamHandler.java:60)
>         at java.lang.Thread.run(Thread.java:662)
> [2012-10-25 21:51:35,822]  INFO
> {org.wso2.carbon.integration.framework.utils.CodeCoverageUtils} -
>  Generated Emma reports
> Tests run: 18, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 97.188
> sec <<< FAILURE!
>
> Results :
>
> Failed tests:
>
> verifyAdminServiceSecurity(org.wso2.identity.integration.tests.SecurityVerificationTestCase):
> The following admin services are vulnerable:
> 1. OAuthAdminService [https,local,]
> 2. OAuth2TokenValidationService [https,local,]
> These are exposed not only on HTTPS.
>
> Thanks,
> Samisa...
>
> Samisa Abeysinghe
> VP Engineering
> WSO2 Inc.
> http://wso2.com
> http://wso2.org
>
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to