[
https://issues.apache.org/jira/browse/PROTON-950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14648105#comment-14648105
]
Andrew Stitcher commented on PROTON-950:
----------------------------------------
At this point I don't think master is blocked as you now can use PLAIN
unencrypted if you need to.
However I'm finding some valgrind issues with the CI tests on Ubuntu 12.04 when
I add the code to default messenger to allowing PLAIN over unencrypted
connections. I want to make sure the CI builds are clean before we release, so
I'm investigating the valgrind issues.
These issues seem to actually be in the version of cyrus SASL on the CI
machine, but I want to be sure before adding in valgrind suppressions for them.
> SASL PLAIN over cleartext should be supported
> ---------------------------------------------
>
> Key: PROTON-950
> URL: https://issues.apache.org/jira/browse/PROTON-950
> Project: Qpid Proton
> Issue Type: Bug
> Components: proton-c
> Affects Versions: 0.10
> Reporter: Ted Ross
> Assignee: Andrew Stitcher
> Priority: Blocker
> Fix For: 0.10
>
>
> In the current 0.10 alpha, if SASL PLAIN is selected, it will only work if
> the connection is encrypted (using SSL). This is a surprising change of
> behavior from earlier versions of Proton and it's arguable that a security
> policy like that should be left to the application using the Proton library.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
