[jboss-jira] [JBoss JIRA] (ELY-1309) Channel binding callback cannot support tls-unique

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/ELY-1309?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse reassigned ELY-1309:
-------------------------------------

    Assignee:     (was: David Lloyd)


> Channel binding callback cannot support tls-unique
> --------------------------------------------------
>
>                 Key: ELY-1309
>                 URL: https://issues.jboss.org/browse/ELY-1309
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: API / SPI, Authentication Client, Authentication Server, Callbacks, SASL
>            Reporter: David Lloyd
>            Priority: Blocker
>             Fix For: 1.2.0.Beta1
>
>
> The revised API for the channel binding callback uses SSL sessions, but the standard TLS channel binding types [according to the RFC|https://tools.ietf.org/html/rfc5929] are associated with the connection, not the session.  It is likely that the proposed channel bindings JDK API will exist on SSLSocket/SSLEngine.  Introduce an API that allows the callback handlers to acquire the connection information using a forward-compatible API.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)