Alexey Serbin created KUDU-3014:
-----------------------------------
Summary: Java client doesn't verify channel bindings during
connection negotiation
Key: KUDU-3014
URL: https://issues.apache.org/jira/browse/KUDU-3014
Project: Kudu
Issue Type: Bug
Components: client, java
Affects Versions: 1.11.0, 1.10.0, 1.9.0, 1.7.1, 1.8.0, 1.7.0, 1.6.0, 1.5.0,
1.4.0, 1.3.1, 1.3.0
Reporter: Alexey Serbin
When negotiating a secure connection with a server (master or tablet server),
Kudu Java client doesn't verify the channel binding information against the TLS
certificate presented by the server.
Kudos to Andy Singer for pointing to the bug.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
