[
https://issues.apache.org/jira/browse/GEODE-6833?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16867047#comment-16867047
]
ASF subversion and git services commented on GEODE-6833:
--------------------------------------------------------
Commit b347bca908205f81881534c1b5ae418f0bafd170 in geode's branch
refs/heads/develop from Ernie Burghardt
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=b347bca ]
GEODE-6833: Updating P2P SSL auth (#3699)
* Adding new test and test cert files.
* Connection uses the more proper way of setNeedClientAuth
> p2p SSL connections always require clients to authenticate
> ----------------------------------------------------------
>
> Key: GEODE-6833
> URL: https://issues.apache.org/jira/browse/GEODE-6833
> Project: Geode
> Issue Type: Bug
> Components: core
> Reporter: Bruce Schuchardt
> Priority: Major
> Time Spent: 2h 40m
> Remaining Estimate: 0h
>
> The SSL over NIO code is configuring the SSL engine to always require a
> connection to do two-way authentication. Connection.createIoFilter() is
> currently doing this:
> {code:java}
> if (!clientSocket) {
> engine.setWantClientAuth(true);
> engine.setNeedClientAuth(true);
> }
> {code}
> but needs to do this instead:
> {code:java}
> if (!clientSocket) {
>
> engine.setNeedClientAuth(SSLConfigurationFactory.getSSLConfigForComponent(getConduit().config,
> SecurableCommunicationChannel.CLUSTER).isRequireAuth());
> }
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
