You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by "Michal Růžička (JIRA)" <ji...@apache.org> on 2014/01/30 22:12:12 UTC
[jira] [Created] (AMQ-5008) Support for certificate revocation
checking (with patch)
Michal Růžička created AMQ-5008:
-----------------------------------
Summary: Support for certificate revocation checking (with patch)
Key: AMQ-5008
URL: https://issues.apache.org/jira/browse/AMQ-5008
Project: ActiveMQ
Issue Type: New Feature
Components: Connector
Reporter: Michal Růžička
Priority: Minor
Currently it's possible to require client authentication during SSL/TLS handshake by adding {{needClientAuth=true}} query string to the respective connector URI. But it is not possible to configure revocation checking of the certificate submitted by the client.
The attached patch adds the capability by introducing a new attribute - {{crl}} - of the {{org.apache.activemq.spring.SpringSslContext}} class and updating the {{org.apache.activemq.spring.SpringSslContext.createTrustManagers()}} method to make use of the value specified for the attribute in the corresponding {{<sslContext />}} tag as appropriate.
The code is inspired by a similar code in jetty webserver: https://github.com/eclipse/jetty.project/blob/release-9/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/SslContextFactory.java#L927-L965
Please consider it for merging.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)