activemq-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Justin Bertram (JIRA)" <>
Subject [jira] [Commented] (ARTEMIS-206) HTTP Upgrade does not work over HTTPS
Date Mon, 31 Aug 2015 14:48:46 GMT


Justin Bertram commented on ARTEMIS-206:

I made a small change to the NettyConnector to use "https" when SSL is enabled.  Do you believe
this is sufficient to resolve the issue?

> HTTP Upgrade does not work over HTTPS
> -------------------------------------
>                 Key: ARTEMIS-206
>                 URL:
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>          Components: Broker
>    Affects Versions: 1.0.0
>            Reporter: Jeff Mesnil
>            Assignee: Justin Bertram
> For security reasons, we need to support creating Artemis connections over HTTPS Upgrade.
> Currently, the Upgrade code works only over HTTP.
> We need to also support it over HTTPS for increased security.
> This means that the NettyConnector code that deals with httpUpgradeEnabled must also
check if sslEnabled is set.
> If that's the case, the GET request to upgrade the connection must be done over HTTPS
instead of HTTP (and add Netty's SSLHandler to handle the SSL handshake)

This message was sent by Atlassian JIRA

View raw message