[jboss-jira] [JBoss JIRA] Commented: (JBREM-536) turn off host verification when doing push callback from server using same ssl config as server

[Tom Elrod (JIRA)]

    [ http://jira.jboss.com/jira/browse/JBREM-536?page=comments#action_12339389 ] 
            
Tom  Elrod commented on JBREM-536:
----------------------------------

Have added following line to ServerInvokerCallbackHandler.configureSocketFactory() method:

clientConfig.put("hostnameVerifier", "org.jboss.test.remoting.transport.http.ssl.config.SelfIdentifyingHostnameVerifier");

which will include host name verifier so does not complain when making call back to client instance.  This is specific to http protocol, but will be ignored by other procotols.

> turn off host verification when doing push callback from server using same ssl config as server
> -----------------------------------------------------------------------------------------------
>
>                 Key: JBREM-536
>                 URL: http://jira.jboss.com/jira/browse/JBREM-536
>             Project: JBoss Remoting
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: security
>    Affects Versions: 2.0.0.Beta2 (Boon)
>            Reporter: Tom  Elrod
>         Assigned To: Tom  Elrod
>             Fix For: 2.0.0.CR1 (Boon)
>
>
> Since will not have the ServerinvokerCallbackHandler pick up ssl config from the server when creating push callback client back to callback server, will need to turn off host verification as well as setting the client mode (which is already being done).

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira