Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
Description
There are three places in which a hostname can be set by a client connecting to an AMQP service: (1) in the SNI entry in TLS, (2) in the hostname of the sasl-init frame or (3) in the hostname of the open frame.
It would be helpful if proton either made it easy to get all three of these (where provided) via the pn_connection_t object or better still if there was a single function call (again, operating on the pn_connection_t object) that would verify that the three fields were consistent if specified and return the value or else return the 'most authoritative' value and perhaps some indication that they were not consistent or an error.
This would make it much simpler for server applications using proton - such as the dispatch router - to robustly and securely implement virtual hosting.