[
https://issues.apache.org/jira/browse/KUDU-3014?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alexey Serbin resolved KUDU-3014.
---------------------------------
Fix Version/s: 1.11.1
1.10.1
Resolution: Fixed
Fixed with:
* {{d7e2e998cf963dc98c568f264cc09c7c320cae0a}} in branch-1.10.x
* {{91d196f3340b1c6385f5e165b46e44a872fce7a7}} in branch-1.11.x
* {{a0e896475c139d308e3b6e32110e97168b9562c6}} in mater
> Java client doesn't verify channel bindings during connection negotiation
> -------------------------------------------------------------------------
>
> Key: KUDU-3014
> URL: https://issues.apache.org/jira/browse/KUDU-3014
> Project: Kudu
> Issue Type: Bug
> Components: client, java
> Affects Versions: 1.3.0, 1.3.1, 1.4.0, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.7.1,
> 1.9.0, 1.10.0, 1.11.0
> Reporter: Alexey Serbin
> Priority: Major
> Fix For: 1.10.1, 1.11.1
>
>
> When negotiating a secure connection with a server (master or tablet server),
> Kudu Java client doesn't verify the channel binding information against the
> TLS certificate presented by the server.
> Kudos to Andy Singer for pointing to the bug.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
