You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2021/04/08 23:59:00 UTC

[jira] [Commented] (ARTEMIS-3106) Support for SASL-SCRAM

    [ https://issues.apache.org/jira/browse/ARTEMIS-3106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17317547#comment-17317547 ] 

ASF subversion and git services commented on ARTEMIS-3106:
----------------------------------------------------------

Commit 5313a800a37a4174a43289457a8934266b50f96b in activemq-artemis's branch refs/heads/master from Christoph Läubrich
[ https://gitbox.apache.org/repos/asf?p=activemq-artemis.git;h=5313a80 ]

ARTEMIS-3106 Support for SASL-SCRAM

adds the implementation necessary to perform SASL-SCRAM authentication with ActiveMQ Artemis


> Support for SASL-SCRAM
> ----------------------
>
>                 Key: ARTEMIS-3106
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3106
>             Project: ActiveMQ Artemis
>          Issue Type: New Feature
>          Components: AMQP
>            Reporter: Christoph Läubrich
>            Priority: Major
>          Time Spent: 19h 10m
>  Remaining Estimate: 0h
>
> With the enhancements in ARTEMIS-33 / [PR 3432|https://github.com/apache/activemq-artemis/pull/3432] it would be now possible to plug-in new SASL mechanism.
> One popular one is [SASL-SCRAM|https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism] because it allows channelbinding together with secure storage of user-credential.
> I have created an [implementation of this for Artemis AMQP|https://github.com/laeubi/scram-sasl/tree/artemis/artemis] based on the [SCRAM SASL authentication for Java|https://github.com/ogrebgr/scram-sasl] code with some enhancements/cleanups to the original.
> As the source is already Apache licensed I'd like to propose to include this in the Artemis code-base. This would greatly enhance the interoperability with other implementations e.g. Apache QPID. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)