[EnMasse] Router port 5671, "requireSsl" config property

[Lohmann Carsten (INST/ECS4)]

Hi Ulf,

ok, I've created
https://github.com/EnMasseProject/enmasse/issues/389
to track this.

Best regards

Carsten Lohmann

-----Ursprüngliche Nachricht-----
Von: Ulf Lilleengen [mailto:lulf at redhat.com] 
Gesendet: Dienstag, 24. Oktober 2017 09:50
An: Lohmann Carsten (INST/ECS4) <Carsten.Lohmann at bosch-si.com>; enmasse at redhat.com
Betreff: Re: [EnMasse] Router port 5671, "requireSsl" config property

Hi Carsten,

I agree, I think that should be there.

On 24. okt. 2017 09:31, Lohmann Carsten (INST/ECS4) wrote:
> Hi,
> 
> a question regarding the Qpid router config.
> 
> We noticed that also insecure connections are possible to the 
> "messaging-external" amqps port. This seems to be down to the used 
> qdrouterd.conf not using the "requireSsl" setting in the listener config.
> 
> Shouldn't "requreSsl" be set to true there? Because it seems 
> counter-intuitive to allow insecure connections on the amqps port.
> 
> Best regards
> 
> *Carsten Lohmann
> *
> (INST/ECS4)
> Bosch Software Innovations GmbH | Ullsteinstr. 128 | 12109 Berlin |
> GERMANY| www.bosch-si.com <http://www.bosch-si.com>
> Tel. +49 30 726112-130 | Fax +49 30 726112-100 | 
> carsten.lohmann at bosch-si.com <mailto:carsten.lohmann at bosch-si.com>
> 
> Sitz: Berlin, Registergericht: Amtsgericht Charlottenburg; HRB 148411 
> B
> Aufsichtsratsvorsitzender: Dr.-Ing. Thorsten Lücke; Geschäftsführung: 
> Dr.-Ing. Rainer Kallenbach, Michael Hahn
> 
> 
> 
> 
> 
> _______________________________________________
> enmasse mailing list
> enmasse at redhat.com
> https://www.redhat.com/mailman/listinfo/enmasse
> 

--
Ulf