[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15430738#comment-15430738 ] Larry McCay commented on KNOX-733: -- Exporting gateway public cert for client truststores.

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15430728#comment-15430728 ] Larry McCay commented on KNOX-733: -- Hi [~snowch] - thanks for the questions. Again, I thin

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15430520#comment-15430520 ] chris snow commented on KNOX-733: - This sounds good. A few questions ... - If the CLI is g

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15428187#comment-15428187 ] Larry McCay commented on KNOX-733: -- I am thinking that we could use a permissive TrustStrat

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15427195#comment-15427195 ] Larry McCay commented on KNOX-733: -- Technically, the Knox CLI has nothing to do with this l

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15427071#comment-15427071 ] chris snow commented on KNOX-733: - I should have said CLI / library rather than just CLI. I

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15427036#comment-15427036 ] Larry McCay commented on KNOX-733: -- [~snowch] - those are reasonable requirements. We need

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15426013#comment-15426013 ] chris snow commented on KNOX-733: - In terms of requirements: 1) I would like the CLI to be

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15423192#comment-15423192 ] Larry McCay commented on KNOX-733: -- The DSL should concentrate on keeping the underlying im

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15423098#comment-15423098 ] Sumit Gupta commented on KNOX-733: -- I was a bit concerned about the 'leakiness' of the solu

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15423056#comment-15423056 ] Larry McCay commented on KNOX-733: -- Hmmm, it seems to me that we should be making the exist

[jira] [Commented] (KNOX-733) Knox shell client is susceptible to man-in-the-middle attack

[ https://issues.apache.org/jira/browse/KNOX-733?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15422684#comment-15422684 ] Sumit Gupta commented on KNOX-733: -- An additional method to login that takes a httpclient s