summaryrefslogtreecommitdiff
path: root/cpp/src/qpid/sys/SslPlugin.cpp
Commit message (Collapse)AuthorAgeFilesLines
* QPID-4931: Only allow broker to listen to a single address if "--port 0" ↵Andrew Stitcher2013-06-191-1/+1
| | | | | | | | | | | specified - If more than one address is specified or implied by the defaults the broker will log a warning - This is intended to avoid testing problems where the broker fails to connect to the port of subsequent listening addresses git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1494656 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4810: No TCP if SSL initialisation fails and TCP/SSL mux enabledAndrew Stitcher2013-05-021-34/+37
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1478510 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4807: Add new broker option to disable listening on specific transport typeAndrew Stitcher2013-05-021-25/+23
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1478398 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4610: Remove duplicated transport code from C++ brokerAndrew Stitcher2013-03-011-194/+28
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1451443 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4315: Changed Connection management name to be supplied by LinkAndrew Stitcher2013-01-081-14/+20
| | | | | | | code on outgoing connections so that the Link code can correlate the connection with the Link using the name. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1430573 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3351: Provide ability to specify the network interfacesAndrew Stitcher2012-11-161-38/+70
| | | | | | Add listening to specific ports to SSL git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1410365 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4272: Large amounts of code are duplicated between the SSL and TCP ↵Andrew Stitcher2012-10-241-100/+92
| | | | | | | | | | | | | | | transports Refactor SslMux support simplifying it and remove need for separate SslHandler and SslIo code. Refactored SSL client code to use the same connect and broker SSL to use the same accept sequences as the TCP code. This also solves QPID-3565: IPv6 support for SSL transport on Unix C++ client/broker Remove now unneeded ssl files. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1401561 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4272: Large amounts of code are duplicated between the SSL and TCP ↵Andrew Stitcher2012-10-241-1/+1
| | | | | | | | transports Add the security related functions to the Socket/Asynch interfaces git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1401560 13f79535-47bb-0310-9956-ffa450edef68
* QPID-4272: Large amounts of code are duplicated between the SSL and TCP ↵Andrew Stitcher2012-10-241-13/+22
| | | | | | | | | | | transports Refactor to unify the various SSL and TCP interfaces: - Make ssl listen have the same signature as regular sockets - Give ssl connect same interface as tcp - Unify the SSL and TCP IO interfaces some more git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1401558 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: Make ssl setTcpNoDelay interface same as TCPAndrew Stitcher2012-08-291-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1378663 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: Remove obsolete and now unused codeAndrew Stitcher2012-08-291-22/+0
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1378662 13f79535-47bb-0310-9956-ffa450edef68
* SSL changes for new buffer managementAndrew Stitcher2012-08-101-1/+1
| | | | | | | | | - Needed to rework SslConnector to mirror TCPConnector in order to make changes to the client side, but now Unix SSL and TCP client implementations are much more alike. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1371775 13f79535-47bb-0310-9956-ffa450edef68
* Rearrange buffer memory ownership to avoid leaking buffer memoryAndrew Stitcher2012-08-101-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1371774 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2518: Qpid C++ broker can easily be blocked by client trying to connect ↵Andrew Stitcher2012-05-211-4/+4
| | | | | | | | over SSL port Implement timed disconnect for SSL git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1341263 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2518: Qpid C++ broker can easily be blocked by client trying to connect ↵Andrew Stitcher2012-05-211-6/+14
| | | | | | | | over SSL port Implement timed disconnect for TCP and for SSL/TCP mux git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1341262 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3787 - Fixed shutdown crash in SslPlugin, Fixed problem with sasl_mux test.Ted Ross2012-01-271-1/+4
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1236864 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3514: Allow SSL and non-SSL connections on the same port. Applied patch ↵Gordon Sim2011-10-201-24/+121
| | | | | | from Zane Bitter and added simple test case. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1187011 13f79535-47bb-0310-9956-ffa450edef68
* NO-JIRA: Remove a lot of redundant stuff from the Socket codeAndrew Stitcher2011-05-261-5/+0
| | | | | | - Removal of unused code git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1128065 13f79535-47bb-0310-9956-ffa450edef68
* Refactor socket connect calls to take a string portAndrew Stitcher2011-05-261-2/+2
| | | | | | This is used used to implement unix domain sockets - QPID-3281 git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1128064 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2216: bump up log levelGordon Sim2011-03-071-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1078882 13f79535-47bb-0310-9956-ffa450edef68
* QPID-3007: Unique management identifier for connections.Alan Conway2011-02-011-1/+1
| | | | | | | | | | | | | | | Management was using remote socket address (host:port) to identify connections, but this is not a unique identifier. Both the local and remote addresses are needed to uniquely identify a connection - see http://www.faqs.org/rfcs/rfc793.html. This was causing management errors (multiple objects using same identifier) and cluster failures (invalid-arg exception) due to inconsistencies caused by the incorrect management map. This commit uses "localhost:localport-remotehost:remoteport" as a unique identifier. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1066220 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2412: Support for EXTERNAL mechanism on client-authenticated SSL ↵Gordon Sim2010-03-051-5/+12
| | | | | | | | | | | | connections. On SSL connection where the clients certificate is authenticated (requires the --ssl-require-client-authentication option at present), the clients identity will be taken from that certificate (it will be the CN with any DCs present appended as the domain, e.g. CN=bob,DC=acme,DC=com would result in an identity of bob@acme.com). This will enable the EXTERNAL mechanism when cyrus sasl is in use. The client can still negotiate their desired mechanism. There is a new option on the ssl module (--ssl-sasl-no-dict) that allows the options on ssl connections to be restricted to those that are not vulnerable to dictionary attacks (EXTERNAL being the primary example). git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@919487 13f79535-47bb-0310-9956-ffa450edef68
* QPID-2216: correct option name in log message for ssl plugin.Gordon Sim2009-12-101-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@889207 13f79535-47bb-0310-9956-ffa450edef68
* Add directory to #includeAlan Conway2009-07-141-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@793909 13f79535-47bb-0310-9956-ffa450edef68
* Some minor updates to logging levels to avoid undue alarm.Gordon Sim2009-01-261-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@737679 13f79535-47bb-0310-9956-ffa450edef68
* Log changes: logging default now notice+, "listening on" messages are at ↵Alan Conway2009-01-051-1/+1
| | | | | | notice level. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@731649 13f79535-47bb-0310-9956-ffa450edef68
* Remove default location for certificate database.Gordon Sim2008-10-201-7/+15
| | | | | | | | Some extra checking in loading ssl libraries. git-svn-id: https://svn.apache.org/repos/asf/incubator/qpid/trunk/qpid@706349 13f79535-47bb-0310-9956-ffa450edef68
* Changed default port for SSLGordon Sim2008-10-171-1/+1
| | | | git-svn-id: https://svn.apache.org/repos/asf/incubator/qpid/trunk/qpid@705575 13f79535-47bb-0310-9956-ffa450edef68
* QPID-106: SSL support for c++ (broker and client), can be enabled/disabled ↵Gordon Sim2008-10-171-0/+176
explictly via --with-ssl/--without-ssl args to configure; by default will build the modules if dependencies are found. See SSL readme file for more details. git-svn-id: https://svn.apache.org/repos/asf/incubator/qpid/trunk/qpid@705534 13f79535-47bb-0310-9956-ffa450edef68