You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Alex Rudyy (JIRA)" <ji...@apache.org> on 2016/02/12 13:38:18 UTC
[jira] [Updated] (QPID-7063) [java Broker] SampleLdap
Authentication Provider should be able to override enabled cipher suites
and TLS protocols from context variables for TLS connections to LDAP
servers
[ https://issues.apache.org/jira/browse/QPID-7063?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alex Rudyy updated QPID-7063:
-----------------------------
Summary: [java Broker] SampleLdap Authentication Provider should be able to override enabled cipher suites and TLS protocols from context variables for TLS connections to LDAP servers (was: [java Broker] SampleLdap Authentication Provider should be able to overrid enabled cipher suites and TLS protocols from context variables for TLS connections to LDAP servers)
> [java Broker] SampleLdap Authentication Provider should be able to override enabled cipher suites and TLS protocols from context variables for TLS connections to LDAP servers
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-7063
> URL: https://issues.apache.org/jira/browse/QPID-7063
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Affects Versions: qpid-java-6.0, qpid-java-6.1
> Reporter: Alex Rudyy
>
> At the moment, required TLS protocols and cipher suites can not be set in SSLConetextFactory created in SampleLdap Authentication Provider for TLS connections. As result, Qpid users cannot override TLS protocols and cipher suites to use in TLS connections to LDAP servers which might cause a selection of weaker cipher suites during TLS negotiation or even can prevent establishing of TLS connections in JVM implementations not supporting downgrade of TLS protocol
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org