You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Cliff Jansen (JIRA)" <qp...@incubator.apache.org> on 2010/04/12 17:12:42 UTC

[jira] Created: (QPID-2500) Transport security for the WCF channel

Transport security for the WCF channel
--------------------------------------

                 Key: QPID-2500
                 URL: https://issues.apache.org/jira/browse/QPID-2500
             Project: Qpid
          Issue Type: New Feature
          Components: WCF/C++ Client
    Affects Versions: 0.7
         Environment: Windows
            Reporter: Cliff Jansen
             Fix For: 0.7


SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Commented: (QPID-2500) Transport security for the WCF channel

Posted by "Cliff Jansen (JIRA)" <qp...@incubator.apache.org>.
    [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12856608#action_12856608 ] 

Cliff Jansen commented on QPID-2500:
------------------------------------

At a minimum the AmqpCredentialType enumeration will grow and there
will be new signatures on the AmqpCredential.

If other changes are required, for consistency, the
AmqpTransportSecurity structure and its support classes should try to
look like existing WCF bindings that support these or similar
mechanisms.  The existing design follows that principle.

As an analogy take a look at HttpTransportSecurity and
HttpClientCredentialType for an existing Microsoft binding that
handles a wide range of authentication and security options.

The base WCF ClientCredentials class can already handle most simple
certificate and username/password cases and is meant to be extended to
handle special cases and arbitrary security tokens.  It's flexible,
but not necessarily easy to handle arbitrary proxy and firewall
situations.  Users may prefer to use an AmqpCredential in many cases.
The AmqpCredential provides a mechanism to separate broker credentials
from WCF service endpoint credentials and also provides the building
blocks for more complex bindings in the future (e.g. failover between
multiple brokers).

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-2500) Transport security for the WCF channel

Posted by "Cliff Jansen (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Cliff Jansen updated QPID-2500:
-------------------------------

    Attachment: QPID-2500-1.patch

This patch provides the base functionality and security classes that are expected for specifying authentication and encryption on WCF transports.  

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Commented: (QPID-2500) Transport security for the WCF channel

Posted by "Steve Huston (JIRA)" <qp...@incubator.apache.org>.
    [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12856611#action_12856611 ] 

Steve Huston commented on QPID-2500:
------------------------------------

Ok, great - thanks, Cliff.

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-2500) Transport security for the WCF channel

Posted by "Cliff Jansen (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Cliff Jansen updated QPID-2500:
-------------------------------

    Attachment: QPID-2500-3.patch

Update WcfPerftest to use SSL and SASL plain

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Commented: (QPID-2500) Transport security for the WCF channel

Posted by "Steve Huston (JIRA)" <qp...@incubator.apache.org>.
    [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12857874#action_12857874 ] 

Steve Huston commented on QPID-2500:
------------------------------------

How do you usually buildf WcfPerfTest, Cliff? It's not referenced from QpidWcf.sln.

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Commented: (QPID-2500) Transport security for the WCF channel

Posted by "Steve Huston (JIRA)" <qp...@incubator.apache.org>.
    [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12856434#action_12856434 ] 

Steve Huston commented on QPID-2500:
------------------------------------

Thanks, Cliff.
Question on the strategy of adding arguments for ssl, saslPlain... what's the plan for handling further additions to authentication mechanisms? For example, Kerberos or Windows login keys? Would this require more signatures with the needed arguments?

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Commented: (QPID-2500) Transport security for the WCF channel

Posted by "Cliff Jansen (JIRA)" <qp...@incubator.apache.org>.
    [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12857881#action_12857881 ] 

Cliff Jansen commented on QPID-2500:
------------------------------------

Currently you have to manually update the references to Apache.Qpid.Channel.dll and Apache.Qpid.Interop.dll when building.

The usual rules having the qpidclient.dll, qpidcommon.dll and the boost dlls in the right place or in your PATH apply at runtime.

Since WcfPerftest also launches the native perftest.exe, it needs to be in the path or with the other dlls too.

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-2500) Transport security for the WCF channel

Posted by "Cliff Jansen (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Cliff Jansen updated QPID-2500:
-------------------------------

    Attachment: QPID-2500-2.patch

This patch updates the DTC plugin module to be able to parse data source names for SSL and SASL PLAIN info in the context of an XA resource manager.

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Resolved: (QPID-2500) Transport security for the WCF channel

Posted by "Steve Huston (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Steve Huston resolved QPID-2500.
--------------------------------

    Resolution: Fixed

Applied patches as attached and also added WcfPerfTest project to QpidWcf.sln. Trunk r938677.

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>            Assignee: Steve Huston
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Assigned: (QPID-2500) Transport security for the WCF channel

Posted by "Steve Huston (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-2500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Steve Huston reassigned QPID-2500:
----------------------------------

    Assignee: Steve Huston

> Transport security for the WCF channel
> --------------------------------------
>
>                 Key: QPID-2500
>                 URL: https://issues.apache.org/jira/browse/QPID-2500
>             Project: Qpid
>          Issue Type: New Feature
>          Components: WCF/C++ Client
>    Affects Versions: 0.7
>         Environment: Windows
>            Reporter: Cliff Jansen
>            Assignee: Steve Huston
>             Fix For: 0.7
>
>         Attachments: QPID-2500-1.patch, QPID-2500-2.patch, QPID-2500-3.patch
>
>
> SSL and Sasl PLAIN capabilities have been recently ported to the C++ client on Windows.  The WCF client can now be enhanced to use these features and to provide the expected transport level security classes and binding parameters for specifying encryption and authentication on the transport channel.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org