dev@grizzly.java.net

Re: problems of the SNI from Lee

From: Lee You <lee.y.y.you_at_gmail.com>
Date: Mon, 2 Feb 2015 00:51:23 +1300

Hi Alexey,

So Cool, got it, and I will try it again @next few days.

For me, about this sample, one problem is that I can not switch the “JKS”
files on my server, what I need to do is switch a number of the
HTTPS(SSL/TLS) certificates(cer/crt format ) stored in Database which came
form the clients issued by the different CAs, and I have no chance/ability
to import/classify all of them one by one into one or two or even more
different keystore files for the maintaining.

Also, I used the setKeyStoreBytes(…) of SLContextConfigurator for the
certificate’s bytes, it not looks like supporting that Cit/Cer format .
there is no other method supported the certificates as well. So, do you
have any good ideas/best experiences about that?

Thanks,
Lee


<quote author='oleksiys'>
Hi Lee,

I've just added the sample:
https://java.net/projects/grizzly/sources/git/revision/ee6cff79e6f2bfcb6e079aebe3eb6b2941635d08

but unfortunately it requires some fixes I made on 2.3.x branch.
With the 2.3.18 you'll need to apply a workaround (see attached).

Hope it will help.

WBR,
Alexey.