[ 
https://issues.apache.org/jira/browse/DIRMINA-1144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17443662#comment-17443662
 ] 

Emmanuel Lécharny commented on DIRMINA-1144:
--------------------------------------------

[~sebb] still, you need the ASF credentials when cutting a release. All in all, 
this is not any worse than having a private key in your .ssh directory when 
using ssh to log on machines. It boils down to protect your machine properly 
(crypted partition, etc).

And even when using a tool like KexPassX, admiting you accept to type your 
password everytime it's required, you will need to close the tool as soon as 
you have grabbed the required password...

Security is not simple, and it always comes with a price to pay...

> Deadlock with SSL + Proxy
> -------------------------
>
>                 Key: DIRMINA-1144
>                 URL: https://issues.apache.org/jira/browse/DIRMINA-1144
>             Project: MINA
>          Issue Type: Bug
>          Components: SSL
>    Affects Versions: 2.1.3, 2.1.4
>            Reporter: Giuseppe Persico
>            Assignee: Jonathan Valliere
>            Priority: Critical
>             Fix For: 2.2.0
>
>         Attachments: thread-dump-clean.txt
>
>
> You will find the thread dump attached. This seems to be a problem that 
> occurs using SSL in combination with proxy. I found the problem in the 2.1.4 
> and 2.1.3 versions. The 2.0.20, instead, seems to work,



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to