Java, Secure Development and other IT related Thoughts

  • Eclipse RCP export failure

    Even though the JCrypTool runtime in Eclipse is working perfectly fine, exporting the product via the Product Configuration Editor fails on OS X 10.8.2 with Java 1.7.0_09 (the same happened with 1.7.0_07). Every export crashes after 2 percent with the following exception: /[…]/.metadata/.plugins/org.eclipse.pde.core/temp/org.eclipse.pde.container.feature/compile.org.eclipse.pde.[…]/build.xml:31: /Library/Java/JavaVirtualMachines/jdk1.7.0_09.jdk/Contents/Home/Classes does not exist. The following error occurred while executing this line:…

  • Alphabetically sorting Eclipse RCP help pages and custom bookmark titles

    Extending the Eclipse help in a RCP is easy. However, there seem to be some hidden features as we have lately discovered for JCrypTool. Since JCrypTool is heavily based on crypto plug-ins which do extend our platform, we do include lots of other plug-ins via anchors in the online help: <topic label=”Signatures” href=”toc.html” sort=”true”>   <anchor…

  • JavaOne 2012 roundup

    My first JavaOne ever is over. Had a great time there. San Francisco is a great city, and the weather was perfect, a least the first couple of days. I did enjoy all keynotes, especially of course the Java Community Keynote with James Goslings‘ surprise visit and presentation. Most sessions I‘ve attended were really great.…

  • Still some seats available in my JavaOne session on Apache Camel Security

    Hurry up, JavaOne starts in one week! And there still some spots available in my session on Apache Camel Security. Save the date, October 3rd 2012 (Wednesday) at 10 a.m. at Parc 55 – Embarcadero. My session will introduce you to Apache Camel Security and show how to secure your Camel routes and messages using…

  • Total failure of Java security

    Wow, that’s a sentence I believed I would never write in my professional life: deactivate Java in your web browser immediately! In any browser and on any operating system. Instructions are e.g. available here and normally on your browser manufacturer home page. Turning it off does not have an impact on normal Java applications, those…

  • JavaOne Apache Camel Security Session Update

    It‘s been a while since I last blogged about my JavaOne session. Slides are more or less finished, only the last touch is missing. First time for me with a totally Zen based presentation, I‘m looking forward to that! And I‘m working hard on a cool demo. There is absolutely no Camel security knowledge required…

  • JCrypTool Release Candidate 6 available

    JCrypTool Release Candidate 6 is available for download! This release contains many improved and extended features as well as lots of bugfixes. Download it today via the CryptTool Portal or via the update manager in your JCrypTool installation. Have a look at our wiki for detailed release information. At least at the moment it looks like this will…

  • Nasty NullPointerException in org.springframework.beans.factory.BeanDefinitionStoreException

    I had a lot of trouble with Camel 2.9.2/Spring 3.0.7 projects lately (though the issue is related to Spring, not Camel). During development, a lot of server starts (I used VMware vFabric tc Server Developer Edition v2.7, but others seem to be affected as well) failed with a really nasty exception: org.springframework.beans.factory.BeanDefinitionStoreException: Unexpected exception parsing…

  • Integrating Jenkins build results into JIRA issues

    After linking Subversion (or Git) with JIRA, the build server looks like a worthwhile target too. Aim of the JIRA integration for Jenkins is to link JIRA issues with the resulting build artifact and to answer the question “Which build contains the bug fix for issue 1234?”. The Jenkins JIRA plugin therefore updates the JIRA…

  • Camel Security @ JavaOne – What is it all about?

    As JavaOne 2012 is coming closer, it's time for some more information on my session CON3418 – Confident Data Transfers with Apache Camel Security. As you might have already guessed, it's all about Apache Camel security. So, what exactly is so special about Camel security? Well, it is of course possible to secure any Camel…