dev@glassfish.java.net

Re: GFv3 b41 and Grizzly 1.9.10 and ssl implementations

From: Kedar Mhaswade <Kedar.Mhaswade_at_Sun.COM>
Date: Thu, 26 Mar 2009 13:48:46 -0700

Henry,

You might be actually caught up into this bad naming of things
in GlassFish configuration. The things you think are Java system-properties
are in fact not ;), they are just <system-property> elements which are
not sent as -D's to the Java command line when you start the server.
Thus, they won't be available to System.getProperty() calls.

So, please use create/delete/list-jvm-options command to do what you
need.

I am assuming that you do want to make these entities as Java System
Properties (-D's).

Regards,
Kedar

PS - I don't have a way to address this as yet :(

Henry Story wrote:
> Hi,
>
> To try out the fix of bug
> https://grizzly.dev.java.net/issues/show_bug.cgi?id=486
>
> I tried building GFv3 b41 from source with Grizzly 1.9.10. After a lot
> of simplifying I decided to try without a war, just to see what would
> happen if I tried to GET https://localhost:8181/index.html
> in the browser.
>
> So with this
>
> $ bin/asadmin list-system-properties
> com.sun.grizzly.ssl.auth=need
>
> Grizzly does not ask for any certificate from the client. Yet I guess it
> should. (unless it is asking the client for certificates with signed by
> specific CAs?)
>
> If I try the sslImplementation (which I know is picked up because if I
> put the wrong class name it throws an error)
>
> $ bin/asadmin list-system-properties
> org.jsslutils.extra.grizzly.clientauth=want
> com.sun.grizzly.ssl.auth=need
> org.jsslutils.extra.grizzly.acceptAnyCert=true
> com.sun.grizzly.ssl.sslImplementation=org.jsslutils.extra.grizzly.JSSLutilsImplementation
>
>
> Then after starting GF
>
> $ grep -i jss domains/domain1/logs/server.log
> [#|2009-03-26T20:49:00.721+0100|FINE|glassfish|org.jsslutils.extra.grizzly|_ThreadID=18;_ThreadName=Thread-1;ClassName=null;MethodName=null;|org.jsslutils.extra.grizzly.JSSLutilsImplementation
> instantiated.|#]
> [#|2009-03-26T20:49:01.321+0100|FINE|glassfish|org.jsslutils.extra.grizzly|_ThreadID=21;_ThreadName=Thread-1;ClassName=null;MethodName=null;|org.jsslutils.extra.grizzly.JSSLutilsImplementation
> instantiated.|#]
> [#|2009-03-26T20:49:01.334+0100|FINE|glassfish|org.jsslutils.extra.grizzly|_ThreadID=22;_ThreadName=Thread-1;ClassName=null;MethodName=null;|org.jsslutils.extra.grizzly.JSSLutilsImplementation
> instantiated.|#]
>
> But again I don't get asked for a client certificate, and more to the
> point none of the org.jsslutils.extra.grizzly.JSSLutilsImplementation
> methods get called (they are all commented carefully).
>
> Is the expected behavior that a certificate should be requested in those
> cases when requesting
>
> https://localhost:8181/index.html
>
> I am trying to find out how to test that the fix is working.
>
> Also, do you have any tips on how to Bruno's ssl implementation on a
> grizzly by itself?
>
> Henry
>
> Blog: http://blogs.sun.com/bblfish
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>