You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Justin Bertram (JIRA)" <ji...@apache.org> on 2016/08/15 20:16:20 UTC

[jira] [Updated] (ARTEMIS-656) Artemis does not seem to check the hostname on SSL / TLS connect

     [ https://issues.apache.org/jira/browse/ARTEMIS-656?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Justin Bertram updated ARTEMIS-656:
-----------------------------------
    Issue Type: Improvement  (was: Bug)

> Artemis does not seem to check the hostname on SSL / TLS connect
> ----------------------------------------------------------------
>
>                 Key: ARTEMIS-656
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-656
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>    Affects Versions: 1.3.0
>            Reporter: Mike Hearn
>            Assignee: Justin Bertram
>             Fix For: 1.4.0
>
>
> (I am reporting this second hand, please let me know if this bug report doesn't sound right).
> Artemis doesn't configure a trust manager when connecting bridges, so there's no attempt to verify that the hostname of the target broker matches the one that triggered the connection. An example fix might be
> sslparameters.setEndpointIdentificationAlgorithm("HTTPS")
> and then pass the hostname/port into the SSLEngine constructor.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)