[ 
https://issues.apache.org/jira/browse/THRIFT-106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12635543#action_12635543
 ] 

David Reiss commented on THRIFT-106:
------------------------------------

Would you suggest that we abandon the gnutls implementation in favor of this 
one then?  Are they wire-compatible (or can they be made so)?  Are any of these 
implementations compatible with wrapping a normal Thrift server in stunnel?

> TSSLServerSocket
> ----------------
>
>                 Key: THRIFT-106
>                 URL: https://issues.apache.org/jira/browse/THRIFT-106
>             Project: Thrift
>          Issue Type: Improvement
>          Components: Library (Java)
>         Environment: n/a
>            Reporter: rico sec
>         Attachments: ssl.patch
>
>   Original Estimate: 6h
>  Remaining Estimate: 6h
>
> SSL Connection w/ autogenerated self signed x509 certs seems to be the state 
> of the art for rpc layers.
> if thrift had one ...that would be very good.
> http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html
> if someone does this pls ping/email me, I will do some testing and write a 
> simple key mgmt utility.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to