You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2020/09/10 06:55:00 UTC

[jira] [Created] (DIRSERVER-2329) Replication trust manager improvements

Colm O hEigeartaigh created DIRSERVER-2329:
----------------------------------------------

             Summary: Replication trust manager improvements
                 Key: DIRSERVER-2329
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2329
             Project: Directory ApacheDS
          Issue Type: Task
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 2.0.0.AM27


There are some improvements that should be made regarding trust manager configuration for Replication:
 # In ReplicationTrustManager, the static block is not initialized before the constructor (at least in the tests), leading to a NPE.
 # SyncReplConfiguration defaults to NoVerificationTrustManager, which is not secure, even though this is inconsistent with the value for strictCertVerification (true)
 # The CreateConsumer annotation has a trustManager setting which is not used anywhere
 # The ServerAnnotationProcessor does not wire the value for CreateConsumer.{color:#00627a}strictCertVerification{color}()



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org