Uploaded image for project: 'Qpid Proton'
  1. Qpid Proton
  2. PROTON-1157

Reactor sends messages in the clear if ssl is requested but not available.

VotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • proton-0.12.0
    • proton-0.12.1
    • python-binding
    • None
    • Important

    Description

      See https://github.com/apache/qpid-proton/blob/master/proton-c/bindings/python/proton/reactor.py#L529

      If 'amqps:' is specified and the SSL libraries are not available the client will use an unsecured connection instead. This is done silently so the user is not aware of the security violation.

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            kgiusti Ken Giusti
            kgiusti Ken Giusti
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment