You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@geode.apache.org by "Dick Cavender (Jira)" <ji...@apache.org> on 2019/09/26 18:05:08 UTC
[jira] [Closed] (GEODE-6833) p2p SSL connections always require
clients to authenticate
[ https://issues.apache.org/jira/browse/GEODE-6833?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dick Cavender closed GEODE-6833.
--------------------------------
> p2p SSL connections always require clients to authenticate
> ----------------------------------------------------------
>
> Key: GEODE-6833
> URL: https://issues.apache.org/jira/browse/GEODE-6833
> Project: Geode
> Issue Type: Bug
> Components: core
> Reporter: Bruce J Schuchardt
> Assignee: Ernest Burghardt
> Priority: Major
> Fix For: 1.10.0
>
> Time Spent: 2h 40m
> Remaining Estimate: 0h
>
> The SSL over NIO code is configuring the SSL engine to always require a connection to do two-way authentication. Connection.createIoFilter() is currently doing this:
> {code:java}
> if (!clientSocket) {
> engine.setWantClientAuth(true);
> engine.setNeedClientAuth(true);
> }
> {code}
> but needs to do this instead:
> {code:java}
> if (!clientSocket) {
> engine.setNeedClientAuth(SSLConfigurationFactory.getSSLConfigForComponent(getConduit().config,
> SecurableCommunicationChannel.CLUSTER).isRequireAuth());
> }
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)