https://issues.apache.org/bugzilla/show_bug.cgi?id=48192
Summary: Allow to specify the SSLSocket class in connector tag
of server.xml
Product: Tomcat 6
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P2
Component: Connectors
AssignedTo: [email protected]
ReportedBy: [email protected]
in the connector as per
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Edit%20the%20Tomcat%20Configuration%20File
, it should be possible to define a FQDN of a class implementing
javax.net.ssl.SSLSocket
This way it might be possible to implement one's own SSLSocket subclass.
String org.apache.tomcat.util.net.jsse.JSSEImplementation.SSLSocketClass =
"javax.net.ssl.SSLSocket"
Must be enhanced to honor such a "sslSocketClass" attribute.
This might allow to ban the currently harmful "kickstartHandshake()"
renegotiation method as described in Bug 48158 comment 5
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
