dev@glassfish.java.net

Re: SSL cipher issues

From: Shing Wai Chan <Shing-Wai.Chan_at_Sun.COM>
Date: Wed, 22 Nov 2006 09:17:08 -0800

Byron Nevins wrote:
> FYI:
>
> I ran cipher devtests against build22 and got 11 pass, 8 fails.
>
> So this problem has been around for > 6 weeks
Hi Byron,
The cipher suite tests has been broken because of other changes.
That issue has been fixed by JeanFrancois.
Those tests are passing on 11/3 workspace.
Regards,
     Shing Wai Chan
>
>
> kedar wrote:
>>
>>
>> Shing Wai Chan wrote:
>>> Lloyd L Chambers wrote:
>>>> Shing Wai,
>>>>
>>>> I can set a master password to "foo" but then the domain won't
>>>> start. It's only if I set the master password to 'changeit' that
>>>> it works.
>>>>
>>>> Is that what you're describing?
>>> No, it is a different issue.
>>> The issue that I mentioned is about configure ciphers in ssl element
>>> in domain.xml.
>>> The issue that you mentioned (I think) was introduced when changing
>>> to JKS in v2.
>>
>> Lloyd: It might be because of the cluster profile requiring JKS support.
>> Can you file a bug if there isn't already one out there?
>>
>> Thanks,
>> Kedar
>>>>
>>>> Lloyd
>>>>
>>>> On Nov 21, 2006, at 2:48 PM, Shing Wai Chan wrote:
>>>>
>>>>> Hi,
>>>>> In recent builds (these few days), I notice that there are some
>>>>> issues related to SSL ciphers.
>>>>> If one encounter any cipher related issues, then
>>>>> one can temporary workaround the issues by setting the following
>>>>> two JVM options in domain.xml
>>>>> -Djavax.net.ssl.keyStorePassword=changeit
>>>>> -Djavax.net.ssl.trustStorePassword=changeit
>>>>>
>>>>> Regards,
>>>>> Shing Wai Chan
>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>