Skip to content

Conversation

mattrpav
Copy link
Contributor

No description provided.

@mattrpav mattrpav self-assigned this Jul 29, 2025
@cshannon
Copy link
Contributor

Instead of having to add a new flag, couldn't you just check the ssl config for the transport and see if it's set to require a cert or if the cert is optional?

@mattrpav
Copy link
Contributor Author

Great idea. I'll update if 'wantAuth' or 'needAuth' AND then if there is a certificate present, return true-- otherwise it will fallback to the non-SSL certificate JAAS domain.

@cshannon
Copy link
Contributor

Yeah that should be fine, since it will fallback to the other option. If the cert exists and the context is configured to want/need the cert then that should be good enough. This way you don't need to add another config option because it's essentially already being configured in the context by setting need/want to be true. Prevents mistakes and having to remember to change the config in the same spot twice.

@mattrpav mattrpav changed the title [AMQ-9750] Update JaasDualAuthenticationBroker to support mixed-mode SSL WIP: [AMQ-9750] Update JaasDualAuthenticationBroker to support mixed-mode SSL Sep 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants