You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2023/05/08 18:24:00 UTC

[jira] [Work logged] (DIRMINA-1122) Add support for endpoint identification algorithm

     [ https://issues.apache.org/jira/browse/DIRMINA-1122?focusedWorklogId=861065&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-861065 ]

ASF GitHub Bot logged work on DIRMINA-1122:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 08/May/23 18:23
            Start Date: 08/May/23 18:23
    Worklog Time Spent: 10m 
      Work Description: elecharny commented on PR #26:
URL: https://github.com/apache/mina/pull/26#issuecomment-1538838101

   Hmmm, the patch has been merged, but the tests are failing: the positive tests are OK, but the negative ones aren't.
   Also the TLS protocol is not anymore supported by Java 8, I had to switch to TLSv1.2.
   I'm investigating what could go wrong in MINA 2.1.X and 2.2.X branches, as the implementation is different.




Issue Time Tracking
-------------------

    Worklog Id:     (was: 861065)
    Time Spent: 1h  (was: 50m)

> Add support for endpoint identification algorithm
> -------------------------------------------------
>
>                 Key: DIRMINA-1122
>                 URL: https://issues.apache.org/jira/browse/DIRMINA-1122
>             Project: MINA
>          Issue Type: Improvement
>          Components: Filter, SSL
>    Affects Versions: 2.0.22, 2.1.3
>            Reporter: Marcin L
>            Assignee: Jonathan Valliere
>            Priority: Minor
>             Fix For: 2.2.0
>
>         Attachments: DIRMINA-1122_-_endpoint_identification_algorithm_support.patch
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> Support for endpoint identification algorithm was added in Java 1.7. Currently MINA supports providing single SNI name via org.apache.mina.filter.ssl.SslFilter#PEER_ADDRESS session attribute, but there is no way verifying it matches the certificate received.
> It would be nice if we could provide endpoint identification algorithm to SslFilter so certificate's common name or subject alternative names are verified.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org