[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-12-12 Thread Ken Giusti (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13530496#comment-13530496 ] Ken Giusti commented on PROTON-161: --- Update: added SubjectAltName checking, certificate

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-12-11 Thread Ken Giusti (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13529256#comment-13529256 ] Ken Giusti commented on PROTON-161: --- Affan, As we used to say: "Busted!" You're entir

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-12-10 Thread Affan Dar (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13528527#comment-13528527 ] Affan Dar commented on PROTON-161: -- A couple of quick comments: 1) The HTTP/TLS verifica

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-12-10 Thread Ken Giusti (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13528351#comment-13528351 ] Ken Giusti commented on PROTON-161: --- Posted a candidate fix to reviewboard: https://rev

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-11-29 Thread Ken Giusti (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13506847#comment-13506847 ] Ken Giusti commented on PROTON-161: --- Here's something to consider: The TLS handshake a

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-11-27 Thread Affan Dar (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13504844#comment-13504844 ] Affan Dar commented on PROTON-161: -- I think that works fine. I.e, these three modes for

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-11-27 Thread Rafael H. Schloming (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13504688#comment-13504688 ] Rafael H. Schloming commented on PROTON-161: What amount of plug-ability to yo

[jira] [Commented] (PROTON-161) SSL impl does not allow verification of the peer's identity

2012-11-26 Thread Affan Dar (JIRA)
[ https://issues.apache.org/jira/browse/PROTON-161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13504185#comment-13504185 ] Affan Dar commented on PROTON-161: -- A quick thought/requirement on the user model for the