You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Keith Wall (JIRA)" <ji...@apache.org> on 2016/03/23 23:53:25 UTC
[jira] [Assigned] (QPID-7063) [Java Broker] SimpleLdap
Authentication Provider should be able to override enabled cipher suites
and TLS protocols from context variables for TLS connections to LDAP
servers
[ https://issues.apache.org/jira/browse/QPID-7063?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Keith Wall reassigned QPID-7063:
--------------------------------
Assignee: Keith Wall
> [Java Broker] SimpleLdap Authentication Provider should be able to override enabled cipher suites and TLS protocols from context variables for TLS connections to LDAP servers
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-7063
> URL: https://issues.apache.org/jira/browse/QPID-7063
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Affects Versions: qpid-java-6.0, qpid-java-6.1
> Reporter: Alex Rudyy
> Assignee: Keith Wall
> Fix For: qpid-java-6.1
>
> Attachments: 0001-QPID-7063-Java-Broker-Allow-TLS-protocols-cipher-sui.patch
>
>
> At the moment, required TLS protocols and cipher suites can not be set in SSLConetextFactory created in SampleLdap Authentication Provider for TLS connections. As result, Qpid users cannot override TLS protocols and cipher suites to use in TLS connections to LDAP servers which might cause a selection of weaker cipher suites during TLS negotiation or even can prevent establishing of TLS connections in JVM implementations not supporting downgrade of TLS protocol
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org