Uploaded image for project: 'Vnfsdk'
  1. Vnfsdk
  2. VNFSDK-755

fix CRITICAL weak-cryptography issues identified in sonarcloud

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: High High
    • Jakarta Release
    • Honolulu Release

      Sonarcloud identified the following security bugs in your project and, as agreed by the TSC, should be fixed within the Honolulu release. Any not finished in Honolulu must be fixed within the Istanbul release. Follow each of the URLs for details on each each bug, along with recommended fixes.

       
      If any of the links below fail, please find your code on the master list found at <https://sonarcloud.io/organizations/onap/issues?resolved=false&sonarsourceSecurity=weak-cryptography>.

      Project: onap_vnfsdk-ves-agent
      Component: onap_vnfsdk-ves-agent:src/main/java/evel_javalibrary/att/com/AgentMain.java
      Message: Enable server certificate validation on this SSL/TLS connection.
      Severity: CRITICAL
      Line: 208
      Effort: 5min
      Creation-Date: 2018-03-13T20:59:34+0100
      URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXGYbmlUEYmYIxWYf3rX&open=AXGYbmlUEYmYIxWYf3rX

      Project: onap_vnfsdk-ves-agent
      Component: onap_vnfsdk-ves-agent:src/main/java/evel_javalibrary/att/com/AgentMain.java
      Message: Enable server certificate validation on this SSL/TLS connection.
      Severity: CRITICAL
      Line: 211
      Effort: 5min
      Creation-Date: 2018-03-13T20:59:34+0100
      URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXGYbmlUEYmYIxWYf3rY&open=AXGYbmlUEYmYIxWYf3rY

      Project: onap_vnfsdk-ves-agent
      Component: onap_vnfsdk-ves-agent:src/main/java/evel_javalibrary/att/com/AgentMain.java
      Message: Enable server hostname verification on this SSL/TLS connection.
      Severity: CRITICAL
      Line: 265
      Effort: 5min
      Creation-Date: 2019-01-28T20:24:18+0100
      URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXGYbmlUEYmYIxWYf3rc&open=AXGYbmlUEYmYIxWYf3rc

      Project: onap_vnfsdk-ves-agent
      Component: onap_vnfsdk-ves-agent:src/main/java/evel_javalibrary/att/com/AgentMain.java
      Message: Enable server hostname verification on this SSL/TLS connection.
      Severity: CRITICAL
      Line: 406
      Effort: 5min
      Creation-Date: 2018-03-13T20:59:34+0100
      URL: https://sonarcloud.io/project/issues?id=onap_clamp&issues=AXGYbmlUEYmYIxWYf3rk&open=AXGYbmlUEYmYIxWYf3rk

            zwarico Amy Zwarico
            tonylhansen tonylhansen
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: