You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Ulf Lilleengen (JIRA)" <ji...@apache.org> on 2018/01/10 19:28:00 UTC

[jira] [Updated] (ARTEMIS-1598) Cannot lookup certificate from connector

     [ https://issues.apache.org/jira/browse/ARTEMIS-1598?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ulf Lilleengen updated ARTEMIS-1598:
------------------------------------
    Description: 
We are using a keycloak sasl authentication plugin in artemis to authenticate and authorize connections established outwards as well as incoming connections.

However, as the SslHandler is used in some cases to fetch the certificates of the peer, the handler is looked up by the name "ssl". This only works for incoming connections, since the NettyAcceptor uses addLast("ssl", sslhandler), but the NettyConnector uses addLast(sslHandler). This causes the lookup to fail.  



  was:
The keycloak sasl authentication plugin used in enmasse is used in conjunction with established outwards as well as incoming connections.

However, as the SslHandler is used in some cases to fetch the certificates of the peer, the handler is looked up by the name "ssl". This only works for incoming connections, since the NettyAcceptor uses addLast("ssl", sslhandler), but the NettyConnector uses addLast(sslHandler). This causes the lookup to fail.  




> Cannot lookup certificate from connector
> ----------------------------------------
>
>                 Key: ARTEMIS-1598
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-1598
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>            Reporter: Ulf Lilleengen
>
> We are using a keycloak sasl authentication plugin in artemis to authenticate and authorize connections established outwards as well as incoming connections.
> However, as the SslHandler is used in some cases to fetch the certificates of the peer, the handler is looked up by the name "ssl". This only works for incoming connections, since the NettyAcceptor uses addLast("ssl", sslhandler), but the NettyConnector uses addLast(sslHandler). This causes the lookup to fail.  



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)