Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-9519

TlsGuardingConnection doesn't do a TLS handshake on reused connections

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.22.6
    • 1.8.25, 1.42.0, 1.6.22, 1.22.9
    • auth-ldap
    • None

    Description

      With Oak 1.22.6, org.apache.directory.api.api-all received a major version update. With the previous version, the method LdapNetworkConnection#startTls() failed when called more than once on the same connection. As a workaround we used the derived class TlsGuardingConnection which prevented this. With the new version, not only LdapNetworkConnection#startTls() may be called multiple times, but also has to be called when a connection from the pool is reused. TlsGuardingConnection doesn't do this, which results in insecure connections.

      Attachments

        1. OAK-9519.patch
          2 kB
          Manfred Baedke

        Issue Links

          Activity

            People

              baedke Manfred Baedke
              baedke Manfred Baedke
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: