62039 – [CVE-2018-1287 & CVE-2018-1297] Distributed testing : Secure RMI connection by SSL and certificate and bind to host defined "java.rmi.server.hostname" system property

Bug 62039 - [CVE-2018-1287 & CVE-2018-1297] Distributed testing : Secure RMI connection by SSL and certificate and bind to host defined "java.rmi.server.hostname" system property

Summary: [CVE-2018-1287 & CVE-2018-1297] Distributed testing : Secure RMI connection b...

Status:	RESOLVED FIXED

Alias:	None

Product:	JMeter - Now in Github
Classification:	Unclassified
Component:	Main (show other bugs)
Version:	3.3
Hardware:	All All

Importance:	P2 enhancement (vote)
Target Milestone:	---
Assignee:	JMeter issues mailing list

URL:
Keywords:

Depends on:
Blocks:

Reported:	2018-01-23 20:44 UTC by Philippe Mouawad
Modified:	2019-06-09 08:58 UTC (History)
CC List:	1 user (show)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philippe Mouawad 2018-01-23 20:44:11 UTC

Comment 1 Philippe Mouawad 2018-01-23 20:51:16 UTC

Author: pmouawad
Date: Tue Jan 23 20:50:52 2018
New Revision: 1822052

URL: http://svn.apache.org/viewvc?rev=1822052&view=rev
Log:
Bug 62039 - Distributed testing : Provide ability to use SSL
Bugzilla Id: 62039

Added:
    jmeter/trunk/bin/create-rmi-keystore.bat   (with props)
    jmeter/trunk/bin/create-rmi-keystore.sh   (with props)
    jmeter/trunk/src/core/org/apache/jmeter/rmi/
    jmeter/trunk/src/core/org/apache/jmeter/rmi/AliasKeyManager.java   (with props)
    jmeter/trunk/src/core/org/apache/jmeter/rmi/RMIServerSocketFactoryImpl.java   (with props)
    jmeter/trunk/src/core/org/apache/jmeter/rmi/RmiUtils.java   (with props)
    jmeter/trunk/src/core/org/apache/jmeter/rmi/SSLRMIClientSocketFactory.java   (with props)
    jmeter/trunk/src/core/org/apache/jmeter/rmi/SSLRMIServerSocketFactory.java   (with props)
Modified:
    jmeter/trunk/bin/jmeter.properties
    jmeter/trunk/bin/user.properties
    jmeter/trunk/build.xml
    jmeter/trunk/src/core/org/apache/jmeter/JMeter.java
    jmeter/trunk/src/core/org/apache/jmeter/engine/ClientJMeterEngine.java
    jmeter/trunk/src/core/org/apache/jmeter/engine/RemoteJMeterEngineImpl.java
    jmeter/trunk/src/core/org/apache/jmeter/samplers/RemoteSampleListenerImpl.java
    jmeter/trunk/src/core/org/apache/jmeter/threads/RemoteThreadsListenerImpl.java
    jmeter/trunk/xdocs/changes.xml

Comment 2 Philippe Mouawad 2018-01-23 21:01:58 UTC

Author: pmouawad
Date: Tue Jan 23 21:01:37 2018
New Revision: 1822058

URL: http://svn.apache.org/viewvc?rev=1822058&view=rev
Log:
Bug 62039 - Distributed testing : Provide ability to use SSL
Fix bad patching
Add keystore for tests
Bugzilla Id: 62039

Added:
    jmeter/trunk/bin/rmi_keystore.jks   (with props)
Modified:
    jmeter/trunk/bin/create-rmi-keystore.bat
    jmeter/trunk/bin/create-rmi-keystore.sh
    jmeter/trunk/build.xml

Comment 3 Philippe Mouawad 2018-01-26 22:55:58 UTC

Author: pmouawad
Date: Fri Jan 26 22:54:00 2018
New Revision: 1822364

URL: http://svn.apache.org/viewvc?rev=1822364&view=rev
Log:
Bug 62039 Distributed testing: Provide ability to use SSL
Bugzilla Id: 62039

Modified:
    jmeter/trunk/bin/jmeter.properties
    jmeter/trunk/xdocs/usermanual/properties_reference.xml

Comment 4 Felix Schumacher 2018-01-27 12:51:50 UTC

Date: Sat Jan 27 12:27:32 2018
New Revision: 1822400

URL: http://svn.apache.org/viewvc?rev=1822400&view=rev
Log:
Add a bit more documentation on how to setup the keys for ssl.

Bugzilla Id: 62039

Modified:
    jmeter/trunk/xdocs/usermanual/remote-test.xml

Comment 5 Felix Schumacher 2018-01-27 12:59:06 UTC

Date: Sat Jan 27 12:57:58 2018
New Revision: 1822402

URL: http://svn.apache.org/viewvc?rev=1822402&view=rev
Log:
Mention setup of SSL for RMI

Modified:
    jmeter/trunk/xdocs/usermanual/jmeter_distributed_testing_step_by_step.xml

Comment 6 The ASF infrastructure team 2022-09-24 20:38:12 UTC

This issue has been migrated to GitHub: https://github.com/apache/jmeter/issues/4677