]
Darran Lofthouse updated ELY-1309:
----------------------------------
Fix Version/s: 1.2.0.Beta1
(was: 1.1.0.Final)
Channel binding callback cannot support tls-unique
--------------------------------------------------
Key: ELY-1309
URL:
https://issues.jboss.org/browse/ELY-1309
Project: WildFly Elytron
Issue Type: Bug
Components: API / SPI, Authentication Client, Authentication Server, Callbacks,
SASL
Reporter: David Lloyd
Assignee: David Lloyd
Priority: Blocker
Fix For: 1.2.0.Beta1
The revised API for the channel binding callback uses SSL sessions, but the standard TLS
channel binding types [according to the
RFC|https://tools.ietf.org/html/rfc5929] are
associated with the connection, not the session. It is likely that the proposed channel
bindings JDK API will exist on SSLSocket/SSLEngine. Introduce an API that allows the
callback handlers to acquire the connection information using a forward-compatible API.