[PROTON-152] SASL architecture does not support security layers

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: proton-0.2
• Fix Version/s: proton-0.10
• Component/s: proton-c
• Labels: security
• Assignee: Andrew Stitcher
• Reporter: Ted Ross
• Created: 20/Nov/12 18:57
• Updated: 04/Nov/16 22:22
• Resolved: 08/Jan/16 20:09

Description

SASL can optionally insert a security layer in the data stream for a connection. The security layer encrypts/signs/decrypts the data stream. In this way it is architecturally similar to SSL: It performs a handshake in-the-clear and then inserts itself into the stream to provide link security.

Without this support, mechanisms like GSSAPI (Kerberos5) cannot be used.

Issue Links

• relates to: PROTON-334 SASL Implementation for Proton C