From f5e41be93bec9b5556a65292516db07ff845f7d4 Mon Sep 17 00:00:00 2001 From: Gordon Sim Date: Fri, 5 Mar 2010 16:51:22 +0000 Subject: QPID-2412: Support for EXTERNAL mechanism on client-authenticated SSL connections. On SSL connection where the clients certificate is authenticated (requires the --ssl-require-client-authentication option at present), the clients identity will be taken from that certificate (it will be the CN with any DCs present appended as the domain, e.g. CN=bob,DC=acme,DC=com would result in an identity of bob@acme.com). This will enable the EXTERNAL mechanism when cyrus sasl is in use. The client can still negotiate their desired mechanism. There is a new option on the ssl module (--ssl-sasl-no-dict) that allows the options on ssl connections to be restricted to those that are not vulnerable to dictionary attacks (EXTERNAL being the primary example). git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@919487 13f79535-47bb-0310-9956-ffa450edef68 --- cpp/src/qpid/client/ConnectionHandler.h | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'cpp/src/qpid/client/ConnectionHandler.h') diff --git a/cpp/src/qpid/client/ConnectionHandler.h b/cpp/src/qpid/client/ConnectionHandler.h index ed1e385dcf..5f4b454f53 100644 --- a/cpp/src/qpid/client/ConnectionHandler.h +++ b/cpp/src/qpid/client/ConnectionHandler.h @@ -40,6 +40,11 @@ #include namespace qpid { + +namespace sys { +struct SecuritySettings; +} + namespace client { class ConnectionHandler : private StateManager, @@ -95,7 +100,7 @@ public: using InputHandler::handle; typedef boost::function CloseListener; typedef boost::function ErrorListener; - typedef boost::function GetConnSSF; + typedef boost::function GetSecuritySettings; ConnectionHandler(const ConnectionSettings&, framing::ProtocolVersion&); @@ -123,7 +128,7 @@ public: static framing::connection::CloseCode convert(uint16_t replyCode); const std::string& getUserId() const { return operUserId; } - GetConnSSF getSSF; /** query the connection for its security strength factor */ + GetSecuritySettings getSecuritySettings; /** query the transport for its security details */ }; }} -- cgit v1.2.1