[QPID-7894] SSL client auth with multiple connections does not properly use ssl_cert_name connection property

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Not A Bug
• Affects Version/s: qpid-cpp-1.36.0
• Component/s: C++ Broker

Environment

Ubuntu

• Assignee: Unassigned
• Reporter: Chris Richardson
• Created: 21/Aug/17 20:38
• Updated: 24/Aug/17 14:22
• Resolved: 24/Aug/17 13:57

Description

When 2 connections are made using ssl-client-auth within the same process using the ssl-cert-name property to specify the user (via their cert), the second connection uses the same cert as the first one.

This means that ACL rules will not be applied as expected.

The expected behaviour is that connections should be authorised using the cert specified in the ssl-cert-name connection property.

The attached archive contains a script and example c++ program which set up this scenario from scratch and demonstrate the error (NB: script recursively deletes certain subdirectories of the current directory when run).