[ https://issues.apache.org/jira/browse/THRIFT-106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12635543#action_12635543 ]
David Reiss commented on THRIFT-106: ------------------------------------ Would you suggest that we abandon the gnutls implementation in favor of this one then? Are they wire-compatible (or can they be made so)? Are any of these implementations compatible with wrapping a normal Thrift server in stunnel? > TSSLServerSocket > ---------------- > > Key: THRIFT-106 > URL: https://issues.apache.org/jira/browse/THRIFT-106 > Project: Thrift > Issue Type: Improvement > Components: Library (Java) > Environment: n/a > Reporter: rico sec > Attachments: ssl.patch > > Original Estimate: 6h > Remaining Estimate: 6h > > SSL Connection w/ autogenerated self signed x509 certs seems to be the state > of the art for rpc layers. > if thrift had one ...that would be very good. > http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html > if someone does this pls ping/email me, I will do some testing and write a > simple key mgmt utility. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.