David Lloyd created ELY-1309: -------------------------------- Summary: Channel binding callback cannot support tls-unique Key: ELY-1309 URL: https://issues.jboss.org/browse/ELY-1309 Project: WildFly Elytron Issue Type: Bug Components: API / SPI, Authentication Client, Authentication Server, Callbacks, SASL Reporter: David Lloyd Assignee: David Lloyd Priority: Blocker The revised API for the channel binding callback uses SSL sessions, but the standard TLS channel binding types [according to the RFC|https://tools.ietf.org/html/rfc5929] are associated with the connection, not the session. It is likely that the proposed channel bindings JDK API will exist on SSLSocket/SSLEngine. Introduce an API that allows the callback handlers to acquire the connection information using a forward-compatible API. -- This message was sent by Atlassian JIRA (v7.2.3#72005)