Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 52800 invoked from network); 1 Mar 2007 11:36:15 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 1 Mar 2007 11:36:15 -0000 Received: (qmail 9544 invoked by uid 500); 1 Mar 2007 11:36:21 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 9484 invoked by uid 500); 1 Mar 2007 11:36:21 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 9460 invoked by uid 99); 1 Mar 2007 11:36:20 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Mar 2007 03:36:20 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [140.211.11.4] (HELO brutus.apache.org) (140.211.11.4) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Mar 2007 03:36:11 -0800 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 2784A71428C for ; Thu, 1 Mar 2007 03:35:51 -0800 (PST) Message-ID: <4204338.1172748951159.JavaMail.jira@brutus> Date: Thu, 1 Mar 2007 03:35:51 -0800 (PST) From: "Bernt M. Johnsen (JIRA)" To: derby-dev@db.apache.org Subject: [jira] Updated: (DERBY-2356) Make SSL server authentication optional In-Reply-To: <2936069.1171894985818.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/DERBY-2356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bernt M. Johnsen updated DERBY-2356: ------------------------------------ Component/s: Services > Make SSL server authentication optional > --------------------------------------- > > Key: DERBY-2356 > URL: https://issues.apache.org/jira/browse/DERBY-2356 > Project: Derby > Issue Type: Improvement > Components: Network Client, Network Server, Security > Affects Versions: 10.3.0.0 > Reporter: Bernt M. Johnsen > Assigned To: Bernt M. Johnsen > Fix For: 10.3.0.0 > > Attachments: derby-2356-v1.diff, derby-2356-v1.stat, derby-2356-v2.diff, derby-2356-v2.stat, derby-2356-v3.diff, SSLFuncSpect.txt, SSLFuncSpect.txt > > > Default SSL behaviour is to require serer authentication. For a database application this is not as important as it is for web browsers and also creates som extra hassle for the user/application programmer. Since the main objective for SSL in Derby is encryption on the wire, server authentication should be optional (the same way client authentication is). > This also creates some symmetry which can be exploited to simplify the user interfce somewhat. This improvement to DERBY-2108 is described in the attached functional specification. See the attachment for details. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.