[prev in list] [next in list] [prev in thread] [next in thread] 

List:       james-dev
Subject:    [jira] [Commented] (JAMES-3672) TLS authentication via client certificate
From:       René_Cordier_(Jira) <server-dev () james ! apache ! org>
Date:       2021-11-26 4:42:00
Message-ID: JIRA.13412000.1637055871000.63984.1637901720012 () Atlassian ! JIRA
[Download RAW message or body]


    [ https://issues.apache.org/jira/browse/JAMES-3672?page=com.atlassian.jira.plugin. \
system.issuetabpanels:comment-tabpanel&focusedCommentId=17449372#comment-17449372 ] 

René Cordier commented on JAMES-3672:
-------------------------------------

[https://github.com/apache/james-project/pull/750] implemented this and has been \
merged

> TLS authentication via client certificate
> -----------------------------------------
> 
> Key: JAMES-3672
> URL: https://issues.apache.org/jira/browse/JAMES-3672
> Project: James Server
> Issue Type: Improvement
> Affects Versions: master
> Reporter: Karsten Otto
> Priority: Major
> Time Spent: 7h 40m
> Remaining Estimate: 0h
> 
> In order to limit access to trusted partners/users only, James should support TLS \
> with certificate-based client authentication. For this purpose, TLS configuration \
> is extended with the desired authentication mode (none, optional, required), and \
> the associated trust store to validate any received client certificates. Example: \
> {code:java} <tls socketTLS="true" startTLS="false">
> <keystore>file://conf/keystore</keystore>
> <keystoreType>JKS</keystoreType>
> <secret>yoursecret</secret>
> <clientAuth required="true">
> <truststore>file://conf/truststore</truststore>
> <truststoreType>JKS</truststoreType>
> <truststoreSecret>yoursecret</truststoreSecret>
> </clientAuth>
> </tls>{code}
> This is implemented mostly in {{AbstractConfigurableAsyncServer}} and associated \
> Netty infrastructure. T-Shirt size M.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]