[jboss-jira] [JBoss JIRA] (ELY-1309) Channel binding callback cannot support tls-unique

[David Lloyd (JIRA)]

David Lloyd created ELY-1309:
--------------------------------

             Summary: Channel binding callback cannot support tls-unique
                 Key: ELY-1309
                 URL: https://issues.jboss.org/browse/ELY-1309
             Project: WildFly Elytron
          Issue Type: Bug
          Components: API / SPI, Authentication Client, Authentication Server, Callbacks, SASL
            Reporter: David Lloyd
            Assignee: David Lloyd
            Priority: Blocker


The revised API for the channel binding callback uses SSL sessions, but the standard TLS channel binding types [according to the RFC|https://tools.ietf.org/html/rfc5929] are associated with the connection, not the session.  It is likely that the proposed channel bindings JDK API will exist on SSLSocket/SSLEngine.  Introduce an API that allows the callback handlers to acquire the connection information using a forward-compatible API.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)