dev@grizzly.java.net

Re: problems of the SNI from Lee

From: Oleksiy Stashok <oleksiy.stashok_at_oracle.com>
Date: Mon, 02 Feb 2015 13:53:39 -0800

Hi Lee,

do I understand correctly, that now it's general Java question, rather
than Grizzly, or you know how to implement what you need in Java and
just don't know how to do the same in Grizzly?
I don't have much experience in security area, but I remember I had to
convert cer certificates to jks (using Java keytool) in order to use them.

Thanks.

WBR,
Alexey.

On 01.02.15 03:51, Lee You wrote:
> Hi Alexey,
>
> So Cool, got it, and I will try it again @next few days.
>
> For me, about this sample, one problem is that I can not switch the
> “JKS” files on my server, what I need to do is switch a number of the
> HTTPS(SSL/TLS) certificates(cer/crt format ) stored in Database which
> came form the clients issued by the different CAs, and I have no
> chance/ability to import/classify all of them one by one into one or
> two or even more different keystore files for the maintaining.
>
> Also, I used the setKeyStoreBytes(…) of SLContextConfigurator for
> the certificate’s bytes, it not looks like supporting that Cit/Cer
> format . there is no other method supported the certificates as well.
> So, do you have any good ideas/best experiences about that?
>
> Thanks,
> Lee
>
>
> <quote author='oleksiys'>
> Hi Lee,
>
> I've just added the sample:
> https://java.net/projects/grizzly/sources/git/revision/ee6cff79e6f2bfcb6e079aebe3eb6b2941635d08
>
> but unfortunately it requires some fixes I made on 2.3.x branch.
> With the 2.3.18 you'll need to apply a workaround (see attached).
>
> Hope it will help.
>
> WBR,
> Alexey.
>