You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Christoph Läubrich (Jira)" <ji...@apache.org> on 2021/02/06 15:48:00 UTC

[jira] [Created] (ARTEMIS-3106) Support for SASL-SCRAM

Christoph Läubrich created ARTEMIS-3106:
-------------------------------------------

             Summary: Support for SASL-SCRAM
                 Key: ARTEMIS-3106
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3106
             Project: ActiveMQ Artemis
          Issue Type: Bug
          Components: AMQP
            Reporter: Christoph Läubrich


With the enhancements in ARTEMIS-33 / [PR 3432|https://github.com/apache/activemq-artemis/pull/3432] it would be now possible to plug-in new SASL mechanism.
One popular one is [SASL-SCRAM|https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism] because it allows channelbinding together with secure storage of user-credential.

I have created an [implementation of this for Artemis AMQP|https://github.com/laeubi/scram-sasl/tree/artemis/artemis] based on the [SCRAM SASL authentication for Java|https://github.com/ogrebgr/scram-sasl] code with some enhancements/cleanups to the original.

As the source is already Apache licensed I'd like to propose to include this in the Artemis code-base. This would greatly enhance the interoperability with other implementations e.g. Apache QPID. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)