You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Petr Kuzel (Jira)" <ji...@apache.org> on 2020/09/11 10:45:00 UTC

[jira] [Created] (AMQNET-643) SSL transport.clientCertSubject is sometimes ignored

Petr Kuzel created AMQNET-643:
---------------------------------

             Summary: SSL transport.clientCertSubject is sometimes ignored
                 Key: AMQNET-643
                 URL: https://issues.apache.org/jira/browse/AMQNET-643
             Project: ActiveMQ .Net
          Issue Type: Bug
    Affects Versions: 1.7.2
         Environment: Apache.NMS.ActiveMQ.1.7.2\lib\net40\Apache.NMS.ActiveMQ.dll

.NET 4.7.2

Windows 10
            Reporter: Petr Kuzel


If transport.clientCertSubject is specified it must be respected.

 

Unfortunately in 1.7.x, latest being 1.7.2, if windows user certificate store contains single Personal certificate then the certificate is used regardless that the certificate's subject does not match the subject specified using the transport.clientCertSubject parameter.

 

Usage of other certificate than specified using the transport.clientCertSubject parameter is a bad surprise and a security nightmare. 

The problem comes from the wrong conditions in SelectLocalCertificate() at [https://github.com/apache/activemq-nms-openwire/blob/1.7.2/src/main/csharp/Transport/Tcp/SslTransport.cs]

 

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)