Re: [jgroups-users] last v3 -> v4 question: authentication

On 09/11/17 21:39, Questions/problems related to using JGroups wrote:
> On Thu, Nov 9, 2017 at 12:53 AM, Questions/problems related to using 
> JGroups <[email protected] 
> <mailto:[email protected]>> wrote:
> 
>     Use 4.0.8, you may have run into [1]
> 
>     [1] https://issues.jboss.org/browse/JGRP-2227
>     <https://issues.jboss.org/browse/JGRP-2227>
> 
> 
> Thanks -- I love something I can fix with one line.

+1

Note that the latest ASYM_ENCRYPT allows you to drop AUTH from the stack 
if you set use_external_key_exchange to true and add SSL_KEY_EXCHANGE to 
your stack. This uses the SSL handshake to authenticate a joiner to the 
coordinator and vice versa, using SSL sockets and certificates. It also 
eliminates man-in-the-middle attacks for the initial exchange of the 
secret (shared) group key.

> Now that I've been able to upgrade jgroups, I could also throw away the 
> custom IPv6 code I wrote since 
> https://issues.jboss.org/browse/JGRP-1925 was fixed. Very nice.

Perfect!


> Cheers,
> Bobby
> 
> 
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> 
> 
> _______________________________________________
> javagroups-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/javagroups-users
> 

-- 
Bela Ban | http://www.jgroups.org


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
javagroups-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/javagroups-users