coheigea opened a new pull request #43:
URL: https://github.com/apache/directory-server/pull/43
There are some improvements that should be made regarding trust manager
configuration for Replication:
In ReplicationTrustManager, the static block is not initialized before
the constructor (at least in the tests), leading to a NPE.
SyncReplConfiguration defaults to NoVerificationTrustManager, which is
not secure, even though this is inconsistent with the value for
strictCertVerification (true)
The CreateConsumer annotation has a trustManager setting which is not
used anywhere
The ServerAnnotationProcessor does not wire the value for
CreateConsumer.strictCertVerification()
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]