Uploaded image for project: 'Qpid Proton'
  1. Qpid Proton
  2. PROTON-1157

Reactor sends messages in the clear if ssl is requested but not available.

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: proton-0.12.0
    • Fix Version/s: proton-0.12.1
    • Component/s: python-binding
    • Labels:
      None
    • Flags:
      Important

      Description

      See https://github.com/apache/qpid-proton/blob/master/proton-c/bindings/python/proton/reactor.py#L529

      If 'amqps:' is specified and the SSL libraries are not available the client will use an unsecured connection instead. This is done silently so the user is not aware of the security violation.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                kgiusti Ken Giusti
                Reporter:
                kgiusti Ken Giusti
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: