[
https://issues.apache.org/jira/browse/QPID-1899?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12776385#action_12776385
]
Gordon Sim commented on QPID-1899:
----------------------------------
Sorry Steve, that was my fault! I forgot to consider the impact on windows.
The new parameter is the security strength factor (SSF) and indicates the level
of security for communication (0 implies no security, 1 implies integrity
checking only, >1 implies integrity and confidentiality with the number giving
the encryption key length). The SSF is used to negotiate a SASL security layer
on top of the connection should both parties require and support it.
This change was to ensure that connections with SASL level encryption are
allowed when --require-encrypted is set, but that connections that do not
negotiate such encryption and are over an unencrypted socket, are not.
> --require-encryption doesn't work unless cyrus sasl authentication is turned
> on
> -------------------------------------------------------------------------------
>
> Key: QPID-1899
> URL: https://issues.apache.org/jira/browse/QPID-1899
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.5
> Reporter: Gordon Sim
> Assignee: Gordon Sim
> Fix For: 0.6
>
> Attachments: qpid-1899-10_26.patch, qpid-1899-10_30.patch,
> qpid-1899-9-17.patch, qpid-1899-hacky.patch, qpid-1899.patch, qpid-1899.patch
>
>
> If you specify --require-encryption and --auth no then the broker will allow
> un-encrypted conections. (If on the other hand you have authentication on, it
> will prevent you connecting with anything other than a mech that supports
> encryption and will require an encrypting sasl security layer - or of course
> an ssl connection)
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscr...@qpid.apache.org
