[jira] [Commented] (CAMEL-13563) Update Jetty to 9.4.18 + fix client authentication issues

2019-06-11 Thread Andrea Cosentino (JIRA)


[ 
https://issues.apache.org/jira/browse/CAMEL-13563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861040#comment-16861040
 ] 

Andrea Cosentino commented on CAMEL-13563:
--

I mean only 2.x

> Update Jetty to 9.4.18 + fix client authentication issues
> -
>
> Key: CAMEL-13563
> URL: https://issues.apache.org/jira/browse/CAMEL-13563
> Project: Camel
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
>Priority: Major
> Fix For: 3.0.0, 2.23.3, 2.24.1, 3.0.0.M4
>
>  Time Spent: 20m
>  Remaining Estimate: 0h
>
> This task is to update Jetty to 9.4.18, as there are several CVEs associated 
> with the versions under this that we are picking up.
> In addition, a number of components have client authentication issues due to 
> the upgrade to Jetty 9.4.15. I'll fix this as part of this upgrade + add 
> tests.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CAMEL-13563) Update Jetty to 9.4.18 + fix client authentication issues

2019-06-11 Thread Colm O hEigeartaigh (JIRA)


[ 
https://issues.apache.org/jira/browse/CAMEL-13563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861039#comment-16861039
 ] 

Colm O hEigeartaigh commented on CAMEL-13563:
-

[~acosentino] By "I think it's safe to do this on 2.x" - do you mean only 
camel-2.x branch, or also for 2.24.1 + 2.23.3?

> Update Jetty to 9.4.18 + fix client authentication issues
> -
>
> Key: CAMEL-13563
> URL: https://issues.apache.org/jira/browse/CAMEL-13563
> Project: Camel
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
>Priority: Major
> Fix For: 3.0.0, 2.23.3, 2.24.1, 3.0.0.M4
>
>  Time Spent: 20m
>  Remaining Estimate: 0h
>
> This task is to update Jetty to 9.4.18, as there are several CVEs associated 
> with the versions under this that we are picking up.
> In addition, a number of components have client authentication issues due to 
> the upgrade to Jetty 9.4.15. I'll fix this as part of this upgrade + add 
> tests.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CAMEL-13563) Update Jetty to 9.4.18 + fix client authentication issues

2019-06-11 Thread Andrea Cosentino (JIRA)


[ 
https://issues.apache.org/jira/browse/CAMEL-13563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861008#comment-16861008
 ] 

Andrea Cosentino commented on CAMEL-13563:
--

I think it's safe to do this on 2.x, but I'd take care of Karaf integration 
tests and Spring Boot integration tests

> Update Jetty to 9.4.18 + fix client authentication issues
> -
>
> Key: CAMEL-13563
> URL: https://issues.apache.org/jira/browse/CAMEL-13563
> Project: Camel
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
>Priority: Major
> Fix For: 3.0.0, 2.23.3, 2.24.1, 3.0.0.M4
>
>  Time Spent: 20m
>  Remaining Estimate: 0h
>
> This task is to update Jetty to 9.4.18, as there are several CVEs associated 
> with the versions under this that we are picking up.
> In addition, a number of components have client authentication issues due to 
> the upgrade to Jetty 9.4.15. I'll fix this as part of this upgrade + add 
> tests.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CAMEL-13563) Update Jetty to 9.4.18 + fix client authentication issues

2019-06-11 Thread Colm O hEigeartaigh (JIRA)


[ 
https://issues.apache.org/jira/browse/CAMEL-13563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861006#comment-16861006
 ] 

Colm O hEigeartaigh commented on CAMEL-13563:
-

[~acosentino] I think the Jetty upgrade could be backported to the camel-2.x 
branch. Then I can merge the fixes that relate to client authentication only 
back to the older branches. WDYT?

> Update Jetty to 9.4.18 + fix client authentication issues
> -
>
> Key: CAMEL-13563
> URL: https://issues.apache.org/jira/browse/CAMEL-13563
> Project: Camel
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
>Priority: Major
> Fix For: 3.0.0, 2.23.3, 2.24.1, 3.0.0.M4
>
>  Time Spent: 20m
>  Remaining Estimate: 0h
>
> This task is to update Jetty to 9.4.18, as there are several CVEs associated 
> with the versions under this that we are picking up.
> In addition, a number of components have client authentication issues due to 
> the upgrade to Jetty 9.4.15. I'll fix this as part of this upgrade + add 
> tests.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CAMEL-13563) Update Jetty to 9.4.18 + fix client authentication issues

2019-06-11 Thread Andrea Cosentino (JIRA)


[ 
https://issues.apache.org/jira/browse/CAMEL-13563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16860992#comment-16860992
 ] 

Andrea Cosentino commented on CAMEL-13563:
--

done on Camel 3, not sure this can be done on 2.x

> Update Jetty to 9.4.18 + fix client authentication issues
> -
>
> Key: CAMEL-13563
> URL: https://issues.apache.org/jira/browse/CAMEL-13563
> Project: Camel
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
>Priority: Major
> Fix For: 3.0.0, 2.23.3, 2.24.1, 3.0.0.M4
>
>  Time Spent: 20m
>  Remaining Estimate: 0h
>
> This task is to update Jetty to 9.4.18, as there are several CVEs associated 
> with the versions under this that we are picking up.
> In addition, a number of components have client authentication issues due to 
> the upgrade to Jetty 9.4.15. I'll fix this as part of this upgrade + add 
> tests.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (CAMEL-13563) Update Jetty to 9.4.18 + fix client authentication issues

2019-05-24 Thread Andrea Cosentino (JIRA)


[ 
https://issues.apache.org/jira/browse/CAMEL-13563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16847327#comment-16847327
 ] 

Andrea Cosentino commented on CAMEL-13563:
--

The first attempt breaks cometd and salesforce Karaf feature, we need to take 
care of them, but for M4

> Update Jetty to 9.4.18 + fix client authentication issues
> -
>
> Key: CAMEL-13563
> URL: https://issues.apache.org/jira/browse/CAMEL-13563
> Project: Camel
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
>Priority: Major
> Fix For: 3.0.0, 2.23.3, 2.24.1, 3.0.0.M4
>
>
> This task is to update Jetty to 9.4.18, as there are several CVEs associated 
> with the versions under this that we are picking up.
> In addition, a number of components have client authentication issues due to 
> the upgrade to Jetty 9.4.15. I'll fix this as part of this upgrade + add 
> tests.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)