[
https://issues.apache.org/jira/browse/QPID-4463?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13800563#comment-13800563
]
ASF subversion and git services commented on QPID-4463:
-------------------------------------------------------
Commit 1534105 from [~k-wall] in branch 'qpid/trunk'
[ https://svn.apache.org/r1534105 ]
QPID-4463: [Java Broker] Change SimpleLDAPAuthManager to accept trust store
model object in order to conveniently connect to a Directory secured by
certificate signed by private-CA (or using self-signed cert).
* SimpleLDAPAuthManager can be associated with a truststore model object via the
* SSLSocketFactory classes generated on the fly (associated with the
truststore) in order to work around limitations in the javax.naming API.
* In the Management UI, the user currently needs to enter the name of the
truststore configured object (rather than select from a dropdown)
> SimpleLDAPAuthenticationManager should accept truststore and truststore
> password configuration
> ----------------------------------------------------------------------------------------------
>
> Key: QPID-4463
> URL: https://issues.apache.org/jira/browse/QPID-4463
> Project: Qpid
> Issue Type: Improvement
> Components: Java Broker
> Affects Versions: 0.21
> Reporter: Keith Wall
> Assignee: Robbie Gemmell
> Fix For: 0.25
>
> Attachments:
> 0001-QPID-4463-Java-Broker-Change-SimpleLDAPAuthManager-t.patch,
> 0002-QPID-4463-Java-Broker-SimpleLDAPAuthenticationManage.patch,
> AbstractLDAPSSLSocketFactory.java
>
>
> To better support use cases where the Broker is required to authenticate
> against a Directory protected by SSL, the Java Broker should accept
> truststore and truststore password via configuration.
> Currently the user is required to pass the JVM system properties
> javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword (which are
> effectively globals).
--
This message was sent by Atlassian JIRA
(v6.1#6144)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
