You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "Justin Bertram (JIRA)" <ji...@apache.org> on 2016/08/15 20:16:20 UTC
[jira] [Resolved] (ARTEMIS-656) Artemis does not seem to check the
hostname on SSL / TLS connect
[ https://issues.apache.org/jira/browse/ARTEMIS-656?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Justin Bertram resolved ARTEMIS-656.
------------------------------------
Resolution: Fixed
Fix Version/s: 1.4.0
> Artemis does not seem to check the hostname on SSL / TLS connect
> ----------------------------------------------------------------
>
> Key: ARTEMIS-656
> URL: https://issues.apache.org/jira/browse/ARTEMIS-656
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Affects Versions: 1.3.0
> Reporter: Mike Hearn
> Assignee: Justin Bertram
> Fix For: 1.4.0
>
>
> (I am reporting this second hand, please let me know if this bug report doesn't sound right).
> Artemis doesn't configure a trust manager when connecting bridges, so there's no attempt to verify that the hostname of the target broker matches the one that triggered the connection. An example fix might be
> sslparameters.setEndpointIdentificationAlgorithm("HTTPS")
> and then pass the hostname/port into the SSLEngine constructor.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)