Uploaded image for project: 'Jackrabbit Oak'
  1. Jackrabbit Oak
  2. OAK-9451

Cold Standby SSL certificates should be configurable

    XMLWordPrintableJSON

    Details

      Description

      The cold standby is able to do SSL connections to the primary, but currently only using on-the-fly generated certificates. This means that data is transferred over an encrypted connection but there is no protection against a man in the middle yet.

      With this issue we want to:

      • make server and client certificates configurable
      • optionally validate the client certificate
      • optionally only allow matching subjects in client and server certificates

        Attachments

        1. OAK-9451.patch.txt
          102 kB
          Axel Hanikel

          Activity

            People

            • Assignee:
              adulceanu Andrei Dulceanu
              Reporter:
              ahanikel Axel Hanikel
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: