Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-6844

make a durable Server Name Indication SNI fix that does not rely on specific sun classes

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.10, 2.11, 2.12.0, 2.14.8
    • Fix Version/s: None
    • Component/s: Proxy Repository, SSL
    • Labels:
    • Story Points:
      2

      Description

      Current fix for Server Name Indication (SNI), while works, is fragile as it uses sun.* classes:
      https://github.com/sonatype/nexus-oss/commit/b581a1be6ab5b289f44eb7575570589d66bc40c1

      The related HttpClient issue contains comments explaining how to properly implement this (and the code is in place since 4.3.2), so on the long term that is where we should go. Still, it would require some rework of the NexusSSLConnectionSocketFactory we implemented and use with HC4.

      https://issues.apache.org/jira/browse/HTTPCLIENT-1119

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              cstamas Tamás Cservenák
              Last Updated By:
              Peter Lynch Peter Lynch
              Votes:
              5 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title