Cert and User Auth on one Broker

2017-02-15 Thread beku
Hi everybody, I currently have the following setup: Network of Brokers with two amq Instances configured with mutual ssl auth via jaasCertificateAuthenticationPlugin. For this purpose both amq instances have a transportconnector with ssl configured. I would now like to add another transport conn

Re: Activemq bundled Jetty Jetleak vulnerability

2016-09-28 Thread beku
Hi Tim, when I try to respond via "Send Email to [hidden email]" form I get the error: Domain starts with dot Please fix the error and try again. Cheers, Benjamin -- View this message in context: http://activemq.2283324.n4.nabble.com/Activemq-bundled-Jetty-Jetleak-vulnerability-tp4717035p47

Activemq bundled Jetty Jetleak vulnerability

2016-09-27 Thread beku
Hi everybody, it seems the Jetty server bundled with the latest activemq release (5.14.0) is prone to the jetleak vulnerability mentioned in CVE-2015-2080 and here: https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html When exploiting the i