]
Darran Lofthouse reassigned ELY-1309:
-------------------------------------
Assignee: (was: David Lloyd)
Channel binding callback cannot support tls-unique
--------------------------------------------------
Key: ELY-1309
URL:
https://issues.jboss.org/browse/ELY-1309
Project: WildFly Elytron
Issue Type: Bug
Components: API / SPI, Authentication Client, Authentication Server, Callbacks,
SASL
Reporter: David Lloyd
Priority: Blocker
Fix For: 1.2.0.Beta1
The revised API for the channel binding callback uses SSL sessions, but the standard TLS
channel binding types [according to the
RFC|https://tools.ietf.org/html/rfc5929] are
associated with the connection, not the session. It is likely that the proposed channel
bindings JDK API will exist on SSLSocket/SSLEngine. Introduce an API that allows the
callback handlers to acquire the connection information using a forward-compatible API.