diff options
| author | Charles E. Rolke <chug@apache.org> | 2014-07-15 22:54:51 +0000 |
|---|---|---|
| committer | Charles E. Rolke <chug@apache.org> | 2014-07-15 22:54:51 +0000 |
| commit | de1ec0610d7dfc789a4fd9dadf8cd479d48478c1 (patch) | |
| tree | 5df20b014132701a53c177e88632bdd6fa9daa8f /qpid/cpp/src/tests/receiver.cpp | |
| parent | 1f512d55a9cb90dd6184d1c7f03df0f9f4add2f2 (diff) | |
| download | qpid-python-de1ec0610d7dfc789a4fd9dadf8cd479d48478c1.tar.gz | |
QPID-4947: C++ Broker ACL restricts hosts from which users may connect.
This commit adds:
* Acl rule file "create connection host=hostname" support for allowing and denying connections.
* AclHost class to represent a host specified in the rule file.
* Global and user-specific lists of AclHost rules. Created by AclReader and consumed by AclConnectionCounter.
* Address range checks and other giblets in SocketAddress:
** asString support to hide IPv6 decoration and service (port) details.
** binary comparison of network addresses.
** new firstAddress function to complement existing nextAddress. Socket addrinfo for AclHost objects is computed once only for lifetime of Acl file load.
** Posix and Windows implementations are identical.
* New unit test for address comparisons. Testing a live broker is great but forcing connections to be from some arbitrary IPv4 or IPv6 address is hard. So there's a unit test for that.
Further discussion about this feature is in https://reviews.apache.org/r/23322
git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk@1610874 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'qpid/cpp/src/tests/receiver.cpp')
0 files changed, 0 insertions, 0 deletions