qpid-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (DISPATCH-754) Output of qdstat shows authentication on client SSL connections as anonymous (x.509)
Date Thu, 27 Apr 2017 13:42:04 GMT

    [ https://issues.apache.org/jira/browse/DISPATCH-754?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15986638#comment-15986638
] 

ASF subversion and git services commented on DISPATCH-754:
----------------------------------------------------------

Commit a2a31e9e2988ac59300c65e01038d29fdea4221a in qpid-dispatch's branch refs/heads/master
from [~ganeshmurthy]
[ https://git-wip-us.apache.org/repos/asf?p=qpid-dispatch.git;h=a2a31e9 ]

DISPATCH-754 - Fixed output of qdstat to just show x.509 in the authentication field for client
SSL connections


> Output of qdstat shows authentication on client SSL connections as anonymous (x.509)
> ------------------------------------------------------------------------------------
>
>                 Key: DISPATCH-754
>                 URL: https://issues.apache.org/jira/browse/DISPATCH-754
>             Project: Qpid Dispatch
>          Issue Type: Bug
>          Components: Management Agent
>    Affects Versions: 0.7.0
>            Reporter: Ganesh Murthy
>            Assignee: Ganesh Murthy
>         Attachments: A.conf, B.conf, C.conf
>
>
> 3 router config files are attached. Router A is configured with two inter-router connectors
to Routers B and C respectively. These connectors are configured to use SSL+EXTERNAL. The
listeners that these connectors are connecting are set to require authentication (authenticatePeer:
yes)
> When you run a qdstat -c command against router A, the "authentication" field on the
two outbound SSL connections (client connections) shows a anonymous(X.509). It should just
say x.509
> {noformat}
> [gmurthy@localhost dispatch]$ qdstat -b 127.0.0.1:25661 -c
> Connections
>   id  host             container                             role          dir  security
                               authentication    tenant
>   ================================================================================================================================================
>   2   127.0.0.1:25667  C                                     inter-router  out  TLSv1/SSLv3(DHE-DSS-AES256-GCM-SHA384)
 anonymous(x.509)  
>   1   127.0.0.1:25666  B                                     inter-router  out  TLSv1/SSLv3(DHE-DSS-AES256-GCM-SHA384)
 anonymous(x.509)  
>   3   127.0.0.1:37106  1f3f6b0c-297b-4817-a391-deea7ed8ba16  normal        in   no-security
                            anonymous-user    
> [gmurthy@localhost dispatch]$ 
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org


Mime
View raw message