Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-212

Client-side SSL context configuration is subtly wrong

    XMLWordPrintable

Details

    Description

      SSL context client-side configuration is problematic in that the SSL context is not (and cannot be) cached. This means that we lose SSL session reuse and other benefits which may cause problems for users.

      However we also cannot just cache an SSL context on a configuration either - the client credentials may vary on each request, causing leakage between identities.

      What we need to do is have a separate SSL context client configuration mechanism, and use the generic client context configuration to reference this SSL context client configuration.

      Attachments

        Activity

          People

            dlloyd@redhat.com David Lloyd
            dlloyd@redhat.com David Lloyd
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: