date:20210301

Re: Karaf 4.2.10 - NullPointerException during xml parsing

2021-03-01 Thread brock samson

hi, JB. did you get a chance to run my bundle?

From: brock samson 
Sent: Wednesday, February 24, 2021, 11:18 PM
To: user@karaf.apache.org
Subject: Re: Karaf 4.2.10 - NullPointerException during xml parsing

hi, JB.

thank you for looking at this. The attached zip (rename its extension from .txt 
to .zip) contains both the bundle (rename its extension from .txt to .jar) and 
its feature file. the bundle should be placed in the /bundles dir, and you know 
what to do with the feature file =)
here are some points regarding the bundle:
1) the bundle executes automatically during Karaf startup to make it easier for 
you.
2) The bundle contains both the schema and the xml, so you dont have to really 
do anything to the bundle itself in order for it to just run
3) The bundle contains props.properties where you can specify external 
locations to both schema and xml file if you choose to do so for any reason. 
The provided files will be ignored in such case.
4) I have also provided the source .java alongside the binary just in case.

again, really appreciate you taking the time to look at it. thanks!!!

Brock Samson

From: Jean-Baptiste Onofre 
Sent: Tuesday, February 23, 2021 11:56 AM
To: user@karaf.apache.org 
Subject: Re: Karaf 4.2.10 - NullPointerException during xml parsing

Hi Brock,

Maybe you have xerces installed as bundle in your distribution ?

It sounds like a version mismatch.

Can you share the bundles installed ?

Thanks,
Regards
JB

Le 23 févr. 2021 à 16:55, brock samson 
mailto:brock.sams...@hotmail.com>> a écrit :

Hello,

I am using Karaf 4.2.10 and attempting to perform a rather simple xml parsing:

Caused by: java.lang.NullPointerException
at org.apache.xerces.util.ErrorHandlerProxy.error(Unknown 
Source) ~[!/:?]
at 
com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.error(ErrorHandlerWrapper.java:137)
 ~[?:1.8.0_102]
at 
com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:396)
 ~[?:1.8.0_102]
at 
com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:327)
 ~[?:1.8.0_102]
at 
com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:284)
 ~[?:1.8.0_102]
at 
com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.handleStartElement(XMLSchemaValidator.java:1900)
 ~[?:1.8.0_102]
at 
com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.startElement(XMLSchemaValidator.java:740)
 ~[?:1.8.0_102]
at 
com.sun.org.apache.xerces.internal.jaxp.validation.ValidatorHandlerImpl.startElement(ValidatorHandlerImpl.java:570)
 ~[?:1.8.0_102]
at 
org.apache.xerces.jaxp.JAXPValidatorComponent$XNI2SAX.startElement(Unknown 
Source) ~[!/:?]
at 
org.apache.xerces.jaxp.JAXPValidatorComponent.startElement(Unknown Source) 
~[!/:?]
at 
org.apache.xerces.impl.XMLNSDocumentScannerImpl.scanStartElement(Unknown 
Source) ~[!/:?]
at 
org.apache.xerces.impl.XMLNSDocumentScannerImpl$NSContentDispatcher.scanRootElementHook(Unknown
 Source) ~[!/:?]
at 
org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown
 Source) ~[!/:?]
at 
org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown 
Source) ~[!/:?]
at org.apache.xerces.parsers.XML11Configuration.parse(Unknown 
Source) ~[!/:?]
at org.apache.xerces.parsers.XML11Configuration.parse(Unknown 
Source) ~[!/:?]
at org.apache.xerces.parsers.XMLParser.parse(Unknown Source) 
~[!/:?]
at org.apache.xerces.parsers.DOMParser.parse(Unknown Source) 
~[!/:?]
at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(Unknown 
Source) ~[!/:?]
at 
javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:121) ~[?:1.8.0_102]

After snooping around, I noticed a 
/container/lib/endorsed/org.apache.karaf.specs.java.xml-4.2.10.jar lib 
containing parser-related libs. My code executed successfully once I ran Karaf 
without this particular file, though I don’t feel right just pulling it out of 
Karaf blindly, as its absence creates a distinct possibility of unforeseen 
issues down the road.

Here are the only imports my bundle references in its manifest:
Import-Package: 
javax.xml.transform,javax.xml.transform.stream,org.xml.sax,javax.xml.parsers,javax.xml.validation
There are no entries under Bundle-Classpath

Lastly, here is the java code that performs the xml parsing:

DocumentBuilderFactory factory = 
DocumentBuilderFactory.newInstance();
SchemaFactory sf = 
SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
Schema schema = sf.newSchema(new StreamSource(new 
FileInputStream("")));

Re: Dependencies issue?

2021-03-01 Thread Alex Weirig


Hi JB,

yes, that does indeed seem to work.

Thanks

Mat frëndleche Gréiss, Mit freundlichen Grüßen, Meilleures salutations, 
Kind regards,

Alex Weirig
Responsable Technique Ville de Luxembourg Service Enseignement Centre 
Technolink *Tel* +352 4796 - 6127  *Fax* +352 42 88 81 
*Email* alex.wei...@technolink.lu  
www.vdl.lu  // www.technolink.lu 
 Centre Technolink 2, rue Charles de Tornaco 
L-2623 LUXEMBOURG


//indoors.this.blesses

//schaufel.besten.kopie

//supposons.levage.venger

On 01/03/2021 16:22, Jean-Baptiste Onofre wrote:

Hi,

You have to install JAXB 2.3.0 bundle (Jakarta) for JAXRS Whiteboard 
1.1.0 (JAXRS Whiteboard 1.0.6 works because it uses JAXB 2.2.0).


I can update Karaf 4.3.x core to JAXB 2.3.0 (to have version 
alignement), but it should already work.


On the other hand, we are also working on a new spec features repo 
providing most of the "spec" features (JAXB, and others).


Regards
JB

Le 1 mars 2021 à 16:10, Alex Weirig > a écrit :


Dear all,

so far with Karaf 4.2.10 I've been using ...

repo-add 
mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.0.6/xml 

feature:install http-whiteboard aries-jax-rs-whiteboard 
aries-jax-rs-whiteboard-jackson


to install all the required features/bundles to run REST services.

Now I wanted to install a karaf 4.3.0 and thought it might be a good 
idea to get the latest release for theorg.apache.aries.jax.rs 
feature, 1.1.0 if I'm not mistaken.


Unfortunatley the feature:install then fails with dependency issues.

karaf@root()> repo-add 
mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.1.0/xml 
 

Adding feature url 
mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.1.0/xml 

karaf@root()> feature:install http-whiteboard aries-jax-rs-whiteboard 
aries-jax-rs-whiteboard-jackson
org.apache.felix.resolver.reason.ReasonException: Unable to resolve 
root: missing requirement [root] osgi.identity; 
osgi.identity=aries-jax-rs-whiteboard-jackson; type=karaf.feature; 
version="[1.0.0,1.0.0]"; 
filter:="(&(osgi.identity=aries-jax-rs-whiteboard-jackson)(type=karaf.feature)(version>=1.0.0)(version<=1.0.0))" 
[caused by: Unable to resolve aries-jax-rs-whiteboard-jackson/1.0.0: 
missing requirement [aries-jax-rs-whiteboard-jackson/1.0.0] 
osgi.identity; osgi.identity=org.apache.aries.jax.rs.jackson; 
type=osgi.bundle; version="[1.0.0,1.0.0]"; resolution:=mandatory 
[caused by: Unable to resolve org.apache.aries.jax.rs.jackson/1.0.0: 
missing requirement [org.apache.aries.jax.rs.jackson/1.0.0] 
osgi.implementation; osgi.implementation=osgi.jaxrs; 
filter:="(&(osgi.implementation=osgi.jaxrs)(version>=1.0.0)(!(version>=2.0.0)))" 
[caused by: Unable to resolve 
org.apache.aries.jax.rs.whiteboard/1.1.0: missing requirement 
[org.apache.aries.jax.rs.whiteboard/1.1.0] osgi.wiring.package; 
filter:="(&(osgi.wiring.package=javax.xml.bind)(version>=2.3.0)(!(version>=3.0.0)))"]]]
    at 
org.apache.felix.resolver.Candidates$MissingRequirementError.toException(Candidates.java:1341)
    at 
org.apache.felix.resolver.ResolverImpl.doResolve(ResolverImpl.java:434)
    at 
org.apache.felix.resolver.ResolverImpl.resolve(ResolverImpl.java:421)
    at 
org.apache.felix.resolver.ResolverImpl.resolve(ResolverImpl.java:375)
    at 
org.apache.karaf.features.internal.region.SubsystemResolver.resolve(SubsystemResolver.java:257)
    at 
org.apache.karaf.features.internal.service.Deployer.deploy(Deployer.java:392)
    at 
org.apache.karaf.features.internal.service.FeaturesServiceImpl.doProvision(FeaturesServiceImpl.java:1062)
    at 
org.apache.karaf.features.internal.service.FeaturesServiceImpl.lambda$doProvisionInThread$13(FeaturesServiceImpl.java:998)

    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

    at java.lang.Thread.run(Thread.java:748)
Caused by: org.apache.felix.resolver.reason.ReasonException: Unable 
to resolve aries-jax-rs-whiteboard-jackson/1.0.0: missing requirement 
[aries-jax-rs-whiteboard-jackson/1.0.0] osgi.identity; 
osgi.identity=org.apache.aries.jax.rs.jackson; type=osgi.bundle; 
version="[1.0.0,1.0.0]"; resolution:=mandatory [caused by: Unable to 
resolve org.apache.aries.jax.rs.jackson/1.0.0: missing requirement 
[org.apache.aries.jax.rs.jackson/1.0.0] osgi.implementation; 
osgi.implementation=osgi.jaxrs;

How to return HTTP Response Code 401 from call to REST service?

2021-03-01 Thread Paul Spencer

Karaf 4.2.10
CXF 3.4.2

I would like my RESTFUL server to return HTTP Response Code 401 when the basic 
authorization fails.  Instead HTTP Response Code 500 is being returned.

I have found a couple of CXF Jira that described the issue for SOAP 
transactions, but they are marked as fixed.
  https://issues.apache.org/jira/browse/CXF-6786
  https://issues.apache.org/jira/browse/CXF-5940

What do I need to change?

***
* Realm list
***
karaf@root()> jaas:realm-list
Index │ Realm Name │ Login Module Class Name
──┼┼───
1 │ karaf  │ 
org.apache.karaf.jaas.modules.properties.PropertiesLoginModule
2 │ karaf  │ 
org.apache.karaf.jaas.modules.publickey.PublickeyLoginModule
3 │ karaf  │ org.apache.karaf.jaas.modules.audit.FileAuditLoginModule
4 │ karaf  │ org.apache.karaf.jaas.modules.audit.LogAuditLoginModule
5 │ karaf  │ 
org.apache.karaf.jaas.modules.audit.EventAdminAuditLoginModule
karaf@root()>   
   

***
* Code Snippet
***
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.PathParam;
import javax.ws.rs.Produces;
import javax.ws.rs.core.MediaType;

import org.apache.cxf.feature.Features;

@Features(features = { "org.apache.cxf.feature.LoggingFeature",
"org.apache.cxf.interceptor.security.JAASAuthenticationFeature" })
public class SecureServiceRequest {
@GET
@Produces(MediaType.APPLICATION_JSON)
@Path("/{id}")
public Booking get(@PathParam("id") long id) {
return new Booking(id);
}
}
***
* Request with validation crudentials
***
~ paul$ curl -v -X GET http://localhost:8181/cxf/secure/1 -u karaf:karaf
Note: Unnecessary use of -X or --request, GET is already inferred.
*   Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 8181 (#0)
* Server auth using Basic with user 'karaf'
> GET /cxf/secure/1 HTTP/1.1
> Host: localhost:8181
> Authorization: Basic a2FyYWY6a2FyYWY=
> User-Agent: curl/7.54.0
> Accept: */*
> 
< HTTP/1.1 200 OK
< Content-Type: application/json
< Date: Mon, 01 Mar 2021 15:21:44 GMT
< Transfer-Encoding: chunked
< Server: Jetty(9.4.31.v20200723)
< 
* Connection #0 to host localhost left intact
{"id":1}

***
* Request with invalidation crudentials
***
~ paul$ curl -v -X GET http://localhost:8181/cxf/secure/1 -u karaf:badpwd
Note: Unnecessary use of -X or --request, GET is already inferred.
*   Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 8181 (#0)
* Server auth using Basic with user 'karaf'
> GET /cxf/secure/1 HTTP/1.1
> Host: localhost:8181
> Authorization: Basic a2FyYWY6YmFkcHdk
> User-Agent: curl/7.54.0
> Accept: */*
> 
< HTTP/1.1 500 Server Error
< Transfer-Encoding: chunked
< Server: Jetty(9.4.31.v20200723)
< 
* Connection #0 to host localhost left intact
http://cxf.apache.org/bindings/xformat;>http://cxf.apache.org/bindings/xformat;>org.apache.cxf.interceptor.security.AuthenticationException:
 Authentication failed: login failed

***
* Log file
***
ID: 20
Address: http://localhost:8181/cxf/secure/1
Http-Method: GET
Content-Type: 
Headers: {Accept=[*/*], Authorization=[Basic a2FyYWY6YmFkcHdk], 
Content-Type=[null], Host=[localhost:8181], User-Agent=[curl/7.54.0]}
--
10:21:55.197 INFO [qtp675143802-107] Unsupported callback type 
org.apache.karaf.jaas.modules.publickey.PublickeyCallback
10:21:55.199 INFO [qtp675143802-107] FAULT_IN
Address: http://localhost:8181/cxf/secure/1
HttpMethod: GET
ExchangeId: a3c911a4-028c-4db1-aebe-c5097f9bbaa5
Headers: {Authorization=Basic a2FyYWY6YmFkcHdk, Accept=*/*, 
User-Agent=curl/7.54.0, Host=localhost:8181}

10:21:55.200 WARN [qtp675143802-107] Interceptor for 
{http://rs.example.com/}SecureServiceRequest has thrown exception, unwinding now
org.apache.cxf.interceptor.security.AuthenticationException: Authentication 
failed: login failed
at 
org.apache.cxf.interceptor.security.JAASLoginInterceptor.handleMessage(JAASLoginInterceptor.java:166)
 ~[!/:3.4.2]
at 
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
 ~[!/:3.4.2]
at 
org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
 ~[!/:3.4.2]
at 
org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:265)
 ~[!/:3.4.2]
at 
org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
 ~[!/:3.4.2]
at 
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
 ~[!/:3.4.2]
at 
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
 ~[!/:3.4.2]
at 
org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:225)
 ~[!/:3.4.2]
at

Re: Dependencies issue?

2021-03-01 Thread Jean-Baptiste Onofre

Hi,

You have to install JAXB 2.3.0 bundle (Jakarta) for JAXRS Whiteboard 1.1.0 
(JAXRS Whiteboard 1.0.6 works because it uses JAXB 2.2.0).

I can update Karaf 4.3.x core to JAXB 2.3.0 (to have version alignement), but 
it should already work.

On the other hand, we are also working on a new spec features repo providing 
most of the "spec" features (JAXB, and others).

Regards
JB

> Le 1 mars 2021 à 16:10, Alex Weirig  a écrit :
> 
> Dear all,
> 
> so far with Karaf 4.2.10 I've been using ...
> 
> repo-add 
> mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.0.6/xml 
> 
> feature:install http-whiteboard aries-jax-rs-whiteboard 
> aries-jax-rs-whiteboard-jackson
> 
> to install all the required features/bundles to run REST services.
> 
> Now I wanted to install a karaf 4.3.0 and thought it might be a good idea to 
> get the latest release for the org.apache.aries.jax.rs 
>  feature, 1.1.0 if I'm not mistaken.
> 
> Unfortunatley the feature:install then fails with dependency issues.
> 
> karaf@root()> repo-add 
> mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.1.0/xml 
>    
>   
>   
>   
> Adding feature url 
> mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.1.0/xml 
> 
> karaf@root()> feature:install http-whiteboard aries-jax-rs-whiteboard 
> aries-jax-rs-whiteboard-jackson   
>   
>   
>   
> org.apache.felix.resolver.reason.ReasonException: Unable to resolve root: 
> missing requirement [root] osgi.identity; 
> osgi.identity=aries-jax-rs-whiteboard-jackson; type=karaf.feature; 
> version="[1.0.0,1.0.0]"; 
> filter:="(&(osgi.identity=aries-jax-rs-whiteboard-jackson)(type=karaf.feature)(version>=1.0.0)(version<=1.0.0))"
>  [caused by: Unable to resolve aries-jax-rs-whiteboard-jackson/1.0.0: missing 
> requirement [aries-jax-rs-whiteboard-jackson/1.0.0] osgi.identity; 
> osgi.identity=org.apache.aries.jax.rs.jackson; type=osgi.bundle; 
> version="[1.0.0,1.0.0]"; resolution:=mandatory [caused by: Unable to resolve 
> org.apache.aries.jax.rs.jackson/1.0.0: missing requirement 
> [org.apache.aries.jax.rs.jackson/1.0.0] osgi.implementation; 
> osgi.implementation=osgi.jaxrs; 
> filter:="(&(osgi.implementation=osgi.jaxrs)(version>=1.0.0)(!(version>=2.0.0)))"
>  [caused by: Unable to resolve org.apache.aries.jax.rs.whiteboard/1.1.0: 
> missing requirement [org.apache.aries.jax.rs.whiteboard/1.1.0] 
> osgi.wiring.package; 
> filter:="(&(osgi.wiring.package=javax.xml.bind)(version>=2.3.0)(!(version>=3.0.0)))"]]]
> at 
> org.apache.felix.resolver.Candidates$MissingRequirementError.toException(Candidates.java:1341)
> at org.apache.felix.resolver.ResolverImpl.doResolve(ResolverImpl.java:434)
> at org.apache.felix.resolver.ResolverImpl.resolve(ResolverImpl.java:421)
> at org.apache.felix.resolver.ResolverImpl.resolve(ResolverImpl.java:375)
> at 
> org.apache.karaf.features.internal.region.SubsystemResolver.resolve(SubsystemResolver.java:257)
> at 
> org.apache.karaf.features.internal.service.Deployer.deploy(Deployer.java:392)
> at 
> org.apache.karaf.features.internal.service.FeaturesServiceImpl.doProvision(FeaturesServiceImpl.java:1062)
> at 
> org.apache.karaf.features.internal.service.FeaturesServiceImpl.lambda$doProvisionInThread$13(FeaturesServiceImpl.java:998)
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> at 
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> at 
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> at java.lang.Thread.run(Thread.java:748)
> Caused by: org.apache.felix.resolver.reason.ReasonException: Unable to 
> resolve aries-jax-rs-whiteboard-jackson/1.0.0: missing requirement 
> [aries-jax-rs-whiteboard-jackson/1.0.0] osgi.identity; 
> osgi.identity=org.apache.aries.jax.rs.jackson; type=osgi.bundle; 
> version="[1.0.0,1.0.0]"; resolution:=mandatory [caused by: Unable to resolve 
> org.apache.aries.jax.rs.jackson/1.0.0: missing requirement 
> [org.apache.aries.jax.rs.jackson/1.0.0] osgi.implementation; 
> osgi.implementation=osgi.jaxrs; 
> filter:="(&(osgi.implementation=osgi.jaxrs)(version>=1.0.0)(!(version>=2.0.0)))"
>  [caused by: Unable to resolve org.apache.aries.jax.rs.whiteboard/1.1.0: 
> missing requirement [org.apache.aries.jax.rs.whiteboard/1.1.0] 
>

Dependencies issue?

2021-03-01 Thread Alex Weirig


Dear all,

so far with Karaf 4.2.10 I've been using ...

repo-add 
mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.0.6/xml
feature:install http-whiteboard aries-jax-rs-whiteboard 
aries-jax-rs-whiteboard-jackson


to install all the required features/bundles to run REST services.

Now I wanted to install a karaf 4.3.0 and thought it might be a good 
idea to get the latest release for the org.apache.aries.jax.rs feature, 
1.1.0 if I'm not mistaken.


Unfortunatley the feature:install then fails with dependency issues.

karaf@root()> repo-add 
mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.1.0/xml
Adding feature url 
mvn:org.apache.aries.jax.rs/org.apache.aries.jax.rs.features/1.1.0/xml
karaf@root()> feature:install http-whiteboard aries-jax-rs-whiteboard 
aries-jax-rs-whiteboard-jackson
org.apache.felix.resolver.reason.ReasonException: Unable to resolve 
root: missing requirement [root] osgi.identity; 
osgi.identity=aries-jax-rs-whiteboard-jackson; type=karaf.feature; 
version="[1.0.0,1.0.0]"; 
filter:="(&(osgi.identity=aries-jax-rs-whiteboard-jackson)(type=karaf.feature)(version>=1.0.0)(version<=1.0.0))" 
[caused by: Unable to resolve aries-jax-rs-whiteboard-jackson/1.0.0: 
missing requirement [aries-jax-rs-whiteboard-jackson/1.0.0] 
osgi.identity; osgi.identity=org.apache.aries.jax.rs.jackson; 
type=osgi.bundle; version="[1.0.0,1.0.0]"; resolution:=mandatory [caused 
by: Unable to resolve org.apache.aries.jax.rs.jackson/1.0.0: missing 
requirement [org.apache.aries.jax.rs.jackson/1.0.0] osgi.implementation; 
osgi.implementation=osgi.jaxrs; 
filter:="(&(osgi.implementation=osgi.jaxrs)(version>=1.0.0)(!(version>=2.0.0)))" 
[caused by: Unable to resolve org.apache.aries.jax.rs.whiteboard/1.1.0: 
missing requirement [org.apache.aries.jax.rs.whiteboard/1.1.0] 
osgi.wiring.package; 
filter:="(&(osgi.wiring.package=javax.xml.bind)(version>=2.3.0)(!(version>=3.0.0)))"]]]
    at 
org.apache.felix.resolver.Candidates$MissingRequirementError.toException(Candidates.java:1341)
    at 
org.apache.felix.resolver.ResolverImpl.doResolve(ResolverImpl.java:434)
    at 
org.apache.felix.resolver.ResolverImpl.resolve(ResolverImpl.java:421)
    at 
org.apache.felix.resolver.ResolverImpl.resolve(ResolverImpl.java:375)
    at 
org.apache.karaf.features.internal.region.SubsystemResolver.resolve(SubsystemResolver.java:257)
    at 
org.apache.karaf.features.internal.service.Deployer.deploy(Deployer.java:392)
    at 
org.apache.karaf.features.internal.service.FeaturesServiceImpl.doProvision(FeaturesServiceImpl.java:1062)
    at 
org.apache.karaf.features.internal.service.FeaturesServiceImpl.lambda$doProvisionInThread$13(FeaturesServiceImpl.java:998)

    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

    at java.lang.Thread.run(Thread.java:748)
Caused by: org.apache.felix.resolver.reason.ReasonException: Unable to 
resolve aries-jax-rs-whiteboard-jackson/1.0.0: missing requirement 
[aries-jax-rs-whiteboard-jackson/1.0.0] osgi.identity; 
osgi.identity=org.apache.aries.jax.rs.jackson; type=osgi.bundle; 
version="[1.0.0,1.0.0]"; resolution:=mandatory [caused by: Unable to 
resolve org.apache.aries.jax.rs.jackson/1.0.0: missing requirement 
[org.apache.aries.jax.rs.jackson/1.0.0] osgi.implementation; 
osgi.implementation=osgi.jaxrs; 
filter:="(&(osgi.implementation=osgi.jaxrs)(version>=1.0.0)(!(version>=2.0.0)))" 
[caused by: Unable to resolve org.apache.aries.jax.rs.whiteboard/1.1.0: 
missing requirement [org.apache.aries.jax.rs.whiteboard/1.1.0] 
osgi.wiring.package; 
filter:="(&(osgi.wiring.package=javax.xml.bind)(version>=2.3.0)(!(version>=3.0.0)))"]]
    at 
org.apache.felix.resolver.Candidates$MissingRequirementError.toException(Candidates.java:1341)

    ... 12 more
Caused by: org.apache.felix.resolver.reason.ReasonException: Unable to 
resolve org.apache.aries.jax.rs.jackson/1.0.0: missing requirement 
[org.apache.aries.jax.rs.jackson/1.0.0] osgi.implementation; 
osgi.implementation=osgi.jaxrs; 
filter:="(&(osgi.implementation=osgi.jaxrs)(version>=1.0.0)(!(version>=2.0.0)))" 
[caused by: Unable to resolve org.apache.aries.jax.rs.whiteboard/1.1.0: 
missing requirement [org.apache.aries.jax.rs.whiteboard/1.1.0] 
osgi.wiring.package; 
filter:="(&(osgi.wiring.package=javax.xml.bind)(version>=2.3.0)(!(version>=3.0.0)))"]
    at 
org.apache.felix.resolver.Candidates$MissingRequirementError.toException(Candidates.java:1341)

    ... 13 more
Caused by: org.apache.felix.resolver.reason.ReasonException: Unable to 
resolve org.apache.aries.jax.rs.whiteboard/1.1.0: missing requirement 
[org.apache.aries.jax.rs.whiteboard/1.1.0] osgi.wiring.package; 
filter:="(&(osgi.wiring.package=javax.xml.bind)(version>=2.3.0)(!(version>=3.0.0)))"
    at

Re: Jetty security defect

2021-03-01 Thread Jean-Baptiste Onofre

Yes, correct, both 4.2 and 4.3 will get the Jetty upgrade.

Regards
JB

> Le 1 mars 2021 à 14:55, Serge Huber  a écrit :
> 
> Thanks for the work guys !
> 
> Am I understanding correctly that both Karaf 4.2 and 4.3 will get this Jetty 
> upgrade? 
> 
> Regards,
>   Serge... 
> 
> On Mon, Mar 1, 2021 at 2:30 PM Jean-Baptiste Onofre  > wrote:
> Hi Paul,
> 
> Thanks for the update. I’m cutting a new Pax Web release and update in Karaf 
> now.
> 
> Thanks again !
> 
> Regards
> JB
> 
>> Le 1 mars 2021 à 11:38, Paul Stanley > > a écrit :
>> 
>> Hi JB. 
>> 
>> PAX-WEB (and karaf ) will need to be updated to include Jetty 9.4.38 for the 
>> CVE-2020-27223 fix. 
>> 
>> Cheers 
>> Paul 
>> 
>> 
>> 
>> From:"Jean-Baptiste Onofre" > > 
>> To:"user" mailto:user@karaf.apache.org>> 
>> Date:26/02/2021 06:21 
>> Subject:Re: Jetty security defect 
>> 
>> 
>> 
>> Hi Gerald, 
>> 
>> Karaf 4.3.1 will still use Pax Web 7.3.12 (with jetty update). 
>> 
>> Pax Web 8.x (with jetty, undertow updates and refactoring) is not yet fully 
>> ready. 
>> 
>> Regards 
>> JB 
>> 
>> Le 26 févr. 2021 à 07:20, Gerald Kallas - mailbox.org  
>> mailto:catsh...@mailbox.org>> a écrit : 
>> 
>> Hi all, which Karaf release does contain which Pax Web? When would Pax Web 
>> 8.0 be released? 
>> 
>> Tx in advance.
>> 
>> Sent by my mobile device 
>> - Gerald Kallas 
>> 
>> Am 26.02.2021 um 07:05 schrieb Jean-Baptiste Onofre > >:
>> 
>> Hi, 
>> 
>> Yes, Pax Web 7.2.22 includes update to Jetty 9.4.36. 
>> 
>> Regards 
>> JB 
>> 
>> Le 25 févr. 2021 à 19:18, Jackson, Douglas > > a écrit : 
>>  
>> Hi!
>> Is the new pax-web going into the karaf 4.2.11 release?
>> It appears that release might be available sooner than the 4.3.1 release and 
>> I need to apply the fix fairly soon.
>> Thanks,
>> Doug
>> 
>> 
>> 
>> 
>

Re: Jetty security defect

2021-03-01 Thread Serge Huber

Thanks for the work guys !

Am I understanding correctly that both Karaf 4.2 and 4.3 will get this
Jetty upgrade?

Regards,
  Serge...

On Mon, Mar 1, 2021 at 2:30 PM Jean-Baptiste Onofre  wrote:

> Hi Paul,
>
> Thanks for the update. I’m cutting a new Pax Web release and update in
> Karaf now.
>
> Thanks again !
>
> Regards
> JB
>
> Le 1 mars 2021 à 11:38, Paul Stanley  a
> écrit :
>
> Hi JB.
>
> PAX-WEB (and karaf ) will need to be updated to include Jetty 9.4.38 for
> the CVE-2020-27223 fix.
>
> Cheers
> Paul
>
>
>
> From:"Jean-Baptiste Onofre" 
> To:"user" 
> Date:26/02/2021 06:21
> Subject:Re: Jetty security defect
> --
>
>
>
> Hi Gerald,
>
> Karaf 4.3.1 will still use Pax Web 7.3.12 (with jetty update).
>
> Pax Web 8.x (with jetty, undertow updates and refactoring) is not yet
> fully ready.
>
> Regards
> JB
>
> Le 26 févr. 2021 à 07:20, Gerald Kallas - *mailbox.org*
>  <*catsh...@mailbox.org* > a
> écrit :
>
> Hi all, which Karaf release does contain which Pax Web? When would Pax Web
> 8.0 be released?
>
> Tx in advance.
>
> Sent by my mobile device
> - Gerald Kallas
>
> Am 26.02.2021 um 07:05 schrieb Jean-Baptiste Onofre <*j...@nanthrax.net*
> >:
>
> Hi,
>
> Yes, Pax Web 7.2.22 includes update to Jetty 9.4.36.
>
> Regards
> JB
>
> Le 25 févr. 2021 à 19:18, Jackson, Douglas <
> *douglas.s.jack...@siemens.com* > a écrit :
>
>
> Hi!
> Is the new pax-web going into the karaf 4.2.11 release?
> It appears that release might be available sooner than the 4.3.1 release
> and I need to apply the fix fairly soon.
> Thanks,
> Doug
>
>
>
>
>
>

Re: Jetty security defect

2021-03-01 Thread Jean-Baptiste Onofre

Hi Paul,

Thanks for the update. I’m cutting a new Pax Web release and update in Karaf 
now.

Thanks again !

Regards
JB

> Le 1 mars 2021 à 11:38, Paul Stanley  a 
> écrit :
> 
> Hi JB. 
> 
> PAX-WEB (and karaf ) will need to be updated to include Jetty 9.4.38 for the 
> CVE-2020-27223 fix. 
> 
> Cheers 
> Paul 
> 
> 
> 
> From:"Jean-Baptiste Onofre"  
> To:"user"  
> Date:26/02/2021 06:21 
> Subject:Re: Jetty security defect 
> 
> 
> 
> Hi Gerald, 
> 
> Karaf 4.3.1 will still use Pax Web 7.3.12 (with jetty update). 
> 
> Pax Web 8.x (with jetty, undertow updates and refactoring) is not yet fully 
> ready. 
> 
> Regards 
> JB 
> 
> Le 26 févr. 2021 à 07:20, Gerald Kallas - mailbox.org  
> mailto:catsh...@mailbox.org>> a écrit : 
> 
> Hi all, which Karaf release does contain which Pax Web? When would Pax Web 
> 8.0 be released? 
> 
> Tx in advance.
> 
> Sent by my mobile device 
> - Gerald Kallas 
> 
> Am 26.02.2021 um 07:05 schrieb Jean-Baptiste Onofre  >:
> 
> Hi, 
> 
> Yes, Pax Web 7.2.22 includes update to Jetty 9.4.36. 
> 
> Regards 
> JB 
> 
> Le 25 févr. 2021 à 19:18, Jackson, Douglas  > a écrit : 
>  
> Hi!
> Is the new pax-web going into the karaf 4.2.11 release?
> It appears that release might be available sooner than the 4.3.1 release and 
> I need to apply the fix fairly soon.
> Thanks,
> Doug
> 
> 
> 
>

Re: Jetty security defect

2021-03-01 Thread Paul Stanley

Hi JB.

PAX-WEB (and karaf ) will need to be updated to include Jetty 9.4.38 for 
the CVE-2020-27223 fix.

Cheers
Paul



From:   "Jean-Baptiste Onofre" 
To: "user" 
Date:   26/02/2021 06:21
Subject:Re: Jetty security defect



Hi Gerald,

Karaf 4.3.1 will still use Pax Web 7.3.12 (with jetty update).

Pax Web 8.x (with jetty, undertow updates and refactoring) is not yet 
fully ready.

Regards
JB

Le 26 févr. 2021 à 07:20, Gerald Kallas - mailbox.org <
catsh...@mailbox.org> a écrit :

Hi all, which Karaf release does contain which Pax Web? When would Pax Web 
8.0 be released?

Tx in advance.

Sent by my mobile device
- Gerald Kallas

Am 26.02.2021 um 07:05 schrieb Jean-Baptiste Onofre :

Hi,

Yes, Pax Web 7.2.22 includes update to Jetty 9.4.36.

Regards
JB

Le 25 févr. 2021 à 19:18, Jackson, Douglas  
a écrit :

 
Hi!
Is the new pax-web going into the karaf 4.2.11 release?
It appears that release might be available sooner than the 4.3.1 release 
and I need to apply the fix fairly soon.
Thanks,
Doug

Re: Karaf 4.2.10 - NullPointerException during xml parsing

Re: Dependencies issue?

How to return HTTP Response Code 401 from call to REST service?

Re: Dependencies issue?

Dependencies issue?

Re: Jetty security defect

Re: Jetty security defect

Re: Jetty security defect

Re: Jetty security defect

9 matches

Site Navigation

Mail list logo

Footer information