[QPID-7309] [Java Client] [Message Encryption] Improve verification of the recipient's certificate

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Fix Version/s: Future
• Component/s: JMS AMQP 0-x
• Assignee: Unassigned
• Reporter: Keith Wall
• Created: 20/Jun/16 11:44
• Updated: 30/Jan/18 17:22
• Resolved: 30/Jan/18 17:22

Description

The current implementation of end-to-end message encryption permits the encryption of messages with an untrusted certificates. The default behaviour should validate the certificate's chain of trust by default and fail if the chain of trust cannot be established.