[jira] [Commented] (GEODE-6833) p2p SSL connections always require clients to authenticate

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GEODE-6833?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17015541#comment-17015541 ] 

ASF subversion and git services commented on GEODE-6833:
--------------------------------------------------------

Commit 779e5ce0fe4630534fa598e40b17e5e84cb188b3 in geode's branch refs/heads/develop from Bill Burcham
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=779e5ce ]

GEODE-6833: remove redundant ArchRule and layer spec (#4594)



> p2p SSL connections always require clients to authenticate
> ----------------------------------------------------------
>
>                 Key: GEODE-6833
>                 URL: https://issues.apache.org/jira/browse/GEODE-6833
>             Project: Geode
>          Issue Type: Bug
>          Components: core
>            Reporter: Bruce J Schuchardt
>            Assignee: Ernest Burghardt
>            Priority: Major
>             Fix For: 1.10.0
>
>          Time Spent: 3h 40m
>  Remaining Estimate: 0h
>
> The SSL over NIO code is configuring the SSL engine to always require a connection to do two-way authentication.  Connection.createIoFilter() is currently doing this:
> {code:java}
> if (!clientSocket) {
>   engine.setWantClientAuth(true);
>   engine.setNeedClientAuth(true);
> }
> {code}
> but needs to do this instead:
> {code:java}
> if (!clientSocket) {
>   engine.setNeedClientAuth(SSLConfigurationFactory.getSSLConfigForComponent(getConduit().config,
>       SecurableCommunicationChannel.CLUSTER).isRequireAuth());
> }
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)