Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (nike.apache.org: domain of chirino@gmail.com designates
 209.85.146.182 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=ZWcvIvRg5F0S/cz0rsFT1WJOe3849XyW9PpDcotI4GrrWLosvkcGiC1VTzg+AFBQ2RQTZPm3kzcinapNhuR90bDkMb+F28L8VClbzidiGZ6belrBKraM5ojDv/+AEG8QBJ62KHHpsT/I3uHcYBNzT7aYnlp7VaPwTA6RWw1z9NE=
Message-ID: <af2843cd0801041313r51ab27fct66504ce2d0fd48d8@mail.gmail.com>
Date: Fri, 4 Jan 2008 16:13:04 -0500
From: "Hiram Chirino" <hiram@hiramchirino.com>
Sender: chirino@gmail.com
To: users@activemq.apache.org
Subject: Re: Secure a subset of destinations
In-Reply-To: <14597771.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <14435506.post@talk.nabble.com> <14437536.post@talk.nabble.com>
	 <14595944.post@talk.nabble.com>
	 <ec6e67fd0801030538l38798bafj4b734161028013d9@mail.gmail.com>
	 <14597771.post@talk.nabble.com>

That sounds about right.

You should also be aware that it's legal to create a producer with a
null destination.  So you should really check on each send.

Regards,
Hiram

On Jan 3, 2008 9:35 AM, joe.stapleton <joe.stapleton@betfair.com> wrote:
>
> Thanks James. If I was to add an interceptor to block addConsumer/addProducer
> calls to a set of destinations unless the connection is made over a
> particular transport connector would I disrupt the broker->broker
> communication within the network of brokers?
>
> If this is feasible what would be the correct way to determine whether an
> inbound connection was being made over SSL? Something like the fragment
> below with a well named TransportConnector?
>
>         public Subscription addConsumer(ConnectionContext context,
> ConsumerInfo info) throws Exception {
>                 if (destinations.contains(info.getDestination())) {
>                         if (((TransportConnector)context.getConnector()).getName().equals("ssl"))
> {
>                                 return super.addConsumer(context, info);
>                         } else {
>                                 throw new SecurityException("Not accessed over ssl");
>                         }
>                 } else {
>                         return super.addConsumer(context, info);
>                 }
>         }
> --
> View this message in context: http://www.nabble.com/Secure-a-subset-of-destinations-tp14435506s2354p14597771.html
>
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>
>


-- 
Regards,
Hiram

Blog: http://hiramchirino.com

Open Source SOA
http://open.iona.com