[ https://issues.apache.org/jira/browse/QPID-8302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16831237#comment-16831237 ]
ASF subversion and git services commented on QPID-8302: ------------------------------------------------------- Commit 71a37b5fe78963b4723afa2d250d7b3ea71ffeaf in qpid-broker-j's branch refs/heads/master from Alex Rudyy [ https://gitbox.apache.org/repos/asf?p=qpid-broker-j.git;h=71a37b5 ] QPID-8302: [Broker-J] Validate whether private key matches certificate on NonJavaKeystore certificate update > [Broker-J] NonKeystoreTrustore does not validate private key and certificate > matching on certificate update > ----------------------------------------------------------------------------------------------------------- > > Key: QPID-8302 > URL: https://issues.apache.org/jira/browse/QPID-8302 > Project: Qpid > Issue Type: Bug > Components: Broker-J > Affects Versions: qpid-java-broker-7.1.2 > Reporter: Alex Rudyy > Assignee: Alex Rudyy > Priority: Major > Fix For: qpid-java-broker-8.0.0, qpid-java-broker-7.1.3 > > > NonJavaKeystore does not validate whether private key and certificate are > matching on certificate update. In result of human error the certificate can > be updated to the wrong one and after broker restart the TLS stops working. > The validation should be improved to verify that private key matches the > certificate -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org