[ 
https://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrew Stitcher resolved PROTON-2014.
-------------------------------------
       Resolution: Fixed
    Fix Version/s: proton-c-0.28.0

> [c] Example broker can silently use anonymous ciphers when misconfigured
> ------------------------------------------------------------------------
>
>                 Key: PROTON-2014
>                 URL: https://issues.apache.org/jira/browse/PROTON-2014
>             Project: Qpid Proton
>          Issue Type: Bug
>            Reporter: Andrew Stitcher
>            Assignee: Andrew Stitcher
>            Priority: Major
>             Fix For: proton-c-0.28.0
>
>
> The example broker does not check the return value from 
> {color:#2e3436}pn_ssl_domain_set_credentials(){color} and if given a bad 
> certificate will allow anonymous ciphers without even displaying an error 
> message.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to