akka / akka/akka-http

Clarify TLS configuration in HTTP

Open
#98 1 comment 0 reactions 0 assignees View on GitHub
1 - triaged t:client t:docs t:server
Dominant language
Scala
Stars
1.4k
Forks
584
Avg merge
14h 33m
Merged PRs (30d)
24

Description

**Issue by [jrudolph](https://github.com/jrudolph)**
_Saturday Dec 26, 2015 at 09:50 GMT_
_Originally opened as https://github.com/akka/akka/issues/19294_

---

i.e. it should be clear what the relation between HttpsContext and sslConfig should be. HttpsContext allowed configuration of TLS settings for every single one of the `Http` APIs. It seems that now the global SSL config may override some settings.

IMO, in HTTP, there should only be one mechanism to configure TLS and this configuration shouldn't be touched by some global settings.

See also https://gitter.im/akka/akka?at=567c0e150199d70069df9867, #19264, and #19275.

Contributor guide

Open the contributing guide

Research direction

Start by reading the HttpsContext and sslConfig configuration paths used by the Http APIs, then compare the behavior discussed in #19264, #19275, and the linked Gitter conversation. Determine which TLS configuration mechanism should be authoritative and define how global settings and per-API settings should interact; the issue is done when that relationship is unambiguous and consistently implemented.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala
Domain
security
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.