Bug 862561 - Support for ssl-require-client-authentication=yes
Summary: Support for ssl-require-client-authentication=yes
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise MRG
Classification: Red Hat
Component: cumin
Version: 2.2
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: ---
: ---
Assignee: grid-maint-list
QA Contact: MRG Quality Engineering
URL:
Whiteboard:
Depends On:
Blocks: 864997
TreeView+ depends on / blocked
 
Reported: 2012-10-03 08:48 UTC by Stanislav Graf
Modified: 2016-05-26 20:23 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
: 864997 (view as bug list)
Environment:
Last Closed: 2016-05-26 20:23:26 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 825078 1 None None None 2021-01-20 06:05:38 UTC
Red Hat Bugzilla 850517 1 None None None 2021-01-20 06:05:38 UTC

Internal Links: 825078 850517

Description Stanislav Graf 2012-10-03 08:48:17 UTC
Description of problem:
Recently python clients (qpid-stat, qpid-config, qpid-tool) from Messaging started to support option 'ssl-require-client-authentication=yes'.

What does this option do?
Forces clients to authenticate in order to establish an SSL connection.

Who can be affected?
When users start using this option cumin stops working over ssl, but diagnostic python tools will still work.

See linked BZs for more information.

Version-Release number of selected component (if applicable):
cumin-0.1.5444-3

How reproducible:
100%

Steps to Reproduce:
1. Setup broker with 'ssl-require-client-authentication=yes'
2. Try to use cumin-broker configuration with SSL according to MCIG
  
Actual results:
cumin doesn't connect to broker

Expected results:
cumin set according to documentation works over ssl
I propose:
a) mention unsupported 'ssl-require-client-authentication=yes' in MCIG
b) fix cumin to work with both (yes/no) authentication options

Additional info:

Comment 3 Anne-Louise Tangring 2016-05-26 20:23:26 UTC
MRG-Grid is in maintenance and only customer escalations will be considered. This issue can be reopened if a customer escalation associated with it occurs.


Note You need to log in before you can comment on or make changes to this bug.