You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2025/07/22 12:33:00 UTC
[jira] [Commented] (QPID-8689) [Broker-J] Remove switch for ignoring SNI host errors
[ https://issues.apache.org/jira/browse/QPID-8689?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18008992#comment-18008992 ]
ASF GitHub Bot commented on QPID-8689:
--------------------------------------
dakirily opened a new pull request, #311:
URL: https://github.com/apache/qpid-broker-j/pull/311
This PR addresses JIRA [QPID-8689](https://issues.apache.org/jira/browse/QPID-8689), removing switch for ignoring SNI host errors
> [Broker-J] Remove switch for ignoring SNI host errors
> -----------------------------------------------------
>
> Key: QPID-8689
> URL: https://issues.apache.org/jira/browse/QPID-8689
> Project: Qpid
> Issue Type: Improvement
> Components: Broker-J
> Affects Versions: qpid-java-broker-9.2.1
> Reporter: Daniil Kirilyuk
> Priority: Minor
> Fix For: qpid-java-broker-10.0.0
>
>
> QPID-8535 introduced a context variable "qpid.port.amqp.ignoreInvalidSni" to bypass SNIhostname errors (e.g. when VH name contains an underscore) and proceed with SSL handshake would allow the client to continue broker with SSL handshake even when SNI is incorrect.
> As Broker-J will be migrated to Java 17, in this java version an invalid SNI hostname will disallow client to establish TLS connection with the broker and the context variable will take no more effect (see -QPID-8587- for details).
> Context variable "qpid.port.amqp.ignoreInvalidSni" and associated logic should be deleted.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org