1. glassfish
  2. GLASSFISH-17471

IIOP Listener pages can add SSL section to unencrypted orb listener causing another problem


    • Type: Bug Bug
    • Status: Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: 3.1.1_b12
    • Fix Version/s: None
    • Component/s: orb
    • Labels:
    • Environment:

      RHEL5 x64, RHEL6 x64


      When using the admin console if you view the SSL page for an unencrypted orb-listener and then save changes to something (even a change at the ORB level) then the following gets added to the XML for the <iiop-listener ...>
      <ssl classname="com.sun...GlassfishSSLImpl" cert-nickname=""></ssl>

      This does not effect the unencrypted nature of the iiop-listener but does seem to turn on required client authentication for the listener.
      The net effect of this is that unauthenticated connections to the listener get rejected with a CORBA_NO_PERMISSION exception.


        james143 created issue -
        Anissa Lam made changes -
        Field Original Value New Value
        Component/s orb [ 10610 ]
        Component/s admin_gui [ 10588 ]
        Anissa Lam made changes -
        Assignee Anissa Lam [ anilam ] Ken Cavanaugh [ kcavanaugh ]
        Harshad Vilekar made changes -
        Assignee Ken Cavanaugh [ kcavanaugh ] Anissa Lam [ anilam ]
        Component/s admin_gui [ 10588 ]
        Component/s orb [ 10610 ]
        Anissa Lam made changes -
        Assignee Anissa Lam [ anilam ] Harshad Vilekar [ hvilekar ]
        Component/s orb [ 10610 ]
        Component/s admin_gui [ 10588 ]
        Harshad Vilekar made changes -
        Tags iiop corba orb admin-gui 3_1_2-exclude admin-gui corba iiop orb


          • Assignee:
            Harshad Vilekar
          • Votes:
            0 Vote for this issue
            2 Start watching this issue


            • Created: