[
https://issues.apache.org/jira/browse/QPID-8689?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18011170#comment-18011170
]
ASF subversion and git services commented on QPID-8689:
-------------------------------------------------------
Commit 39b5915f6a89396f7931fc87afdf3643a2b634df in qpid-broker-j's branch
refs/heads/main from Daniil Kirilyuk
[ https://gitbox.apache.org/repos/asf?p=qpid-broker-j.git;h=39b5915f6a ]
QPID-8689: [Broker-J] Remove switch for ignoring SNI host errors (#311)
> [Broker-J] Remove switch for ignoring SNI host errors
> -----------------------------------------------------
>
> Key: QPID-8689
> URL: https://issues.apache.org/jira/browse/QPID-8689
> Project: Qpid
> Issue Type: Improvement
> Components: Broker-J
> Affects Versions: qpid-java-broker-9.2.1
> Reporter: Daniil Kirilyuk
> Priority: Minor
> Fix For: qpid-java-broker-10.0.0
>
>
> QPID-8535 introduced a context variable "qpid.port.amqp.ignoreInvalidSni" to
> bypass SNIhostname errors (e.g. when VH name contains an underscore) and
> proceed with SSL handshake would allow the client to continue broker with SSL
> handshake even when SNI is incorrect.
> As Broker-J will be migrated to Java 17, in this java version an invalid SNI
> hostname will disallow client to establish TLS connection with the broker and
> the context variable will take no more effect (see -QPID-8587- for details).
> Context variable "qpid.port.amqp.ignoreInvalidSni" and associated logic
> should be deleted.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
