Andrew Stitcher created PROTON-2014:
---------------------------------------

             Summary: [c] Example broker can silently use anonymous ciphers 
when misconfigured
                 Key: PROTON-2014
                 URL: https://issues.apache.org/jira/browse/PROTON-2014
             Project: Qpid Proton
          Issue Type: Bug
            Reporter: Andrew Stitcher
            Assignee: Andrew Stitcher


The example broker does not check the return value from 
{color:#2e3436}pn_ssl_domain_set_credentials(){color} and if given a bad 
certificate will allow anonymous ciphers without even displaying an error 
message.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to