dev@glassfish.java.net

Re: SSL cipher issues

From: Shing Wai Chan <Shing-Wai.Chan_at_Sun.COM>
Date: Wed, 22 Nov 2006 10:22:05 -0800

Nandini Ektare wrote:
> On Wed, 2006-11-22 at 09:17, Shing Wai Chan wrote:
>> /Byron Nevins wrote:
>> > FYI:
>> >
>> > I ran cipher devtests against build22 and got 11 pass, 8 fails.
>> >
>> > So this problem has been around for > 6 weeks
>> Hi Byron,
>> The cipher suite tests has been broken because of other changes.
>> That issue has been fixed by JeanFrancois.
>> Those tests are passing on 11/3 workspace.
>> Regards,
>> Shing Wai Chan/
> Can you update what is exactly the issue (1557) : To be specific,
> which tests were working on which build number. And which build did
> you see otherwise.
As I mentioned before all of tests cipher test run 11/3 workspace and
according to my record, it does not run on last Friday (11/17)
workspace. Note that it may fail earlier as I don't have run log for
earlier time.
>
> Nandini
> PS: When I spoke to you before you had mentioned all cipher tests were
> working but doesn't look like the right assumption anymore so we need
> specifics.
I do mention that some of the tests fail. (This implies that some of the
tests pass :-) )
I will update the issue tracker for this.
>> />
>> >
>> > kedar wrote:
>> >>
>> >>
>> >> Shing Wai Chan wrote:
>> >>> Lloyd L Chambers wrote:
>> >>>> Shing Wai,
>> >>>>
>> >>>> I can set a master password to "foo" but then the domain won't
>> >>>> start. It's only if I set the master password to 'changeit' that
>> >>>> it works.
>> >>>>
>> >>>> Is that what you're describing?
>> >>> No, it is a different issue.
>> >>> The issue that I mentioned is about configure ciphers in ssl element
>> >>> in domain.xml.
>> >>> The issue that you mentioned (I think) was introduced when changing
>> >>> to JKS in v2.
>> >>
>> >> Lloyd: It might be because of the cluster profile requiring JKS support.
>> >> Can you file a bug if there isn't already one out there?
>> >>
>> >> Thanks,
>> >> Kedar
>> >>>>
>> >>>> Lloyd
>> >>>>
>> >>>> On Nov 21, 2006, at 2:48 PM, Shing Wai Chan wrote:
>> >>>>
>> >>>>> Hi,
>> >>>>> In recent builds (these few days), I notice that there are some
>> >>>>> issues related to SSL ciphers.
>> >>>>> If one encounter any cipher related issues, then
>> >>>>> one can temporary workaround the issues by setting the following
>> >>>>> two JVM options in domain.xml
>> >>>>> -Djavax.net.ssl.keyStorePassword=changeit
>> >>>>> -Djavax.net.ssl.trustStorePassword=changeit
>> >>>>>
>> >>>>> Regards,
>> >>>>> Shing Wai Chan
>> >>>>>
>> >>>>>
>> >>>>> ---------------------------------------------------------------------
>> >>>>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> >>>>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>> >>>>>
>> >>>>
>> >>>> ---------------------------------------------------------------------
>> >>>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> >>>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>> >>>>
>> >>>
>> >>> ---------------------------------------------------------------------
>> >>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> >>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>> >>>
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> >> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>> >>
>> >
>> > ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> > For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: //dev-help_at_glassfish.dev.java.net <mailto:dev-help_at_glassfish.dev.java.net>/
> Thanks, Nandini
>
>
>