Proposal - encrypted cache
by Sebastian Laskawiec
Hey!
A while ago I stumbled upon [1]. The article talks about encrypting data
before they reach the server, so that the server doesn't know how to
decrypt it. This makes the data more secure.
The idea is definitely not new and I have been asked about something
similar several times during local JUGs meetups (in my area there are lots
of payments organizations who might be interested in this).
Of course, this can be easily done inside an app, so that it encrypts the
data and passes a byte array to the Hot Rod Client. I'm just thinking about
making it a bit easier and adding a default encryption/decryption mechanism
to the Hot Rod client.
What do you think? Does it make sense?
Thanks
Sebastian
[1] https://eprint.iacr.org/2016/920.pdf
5 years, 9 months
spare cycles
by Ion Savin
Hi all,
I have some spare cycles over the course of the year which I'm going to
use to contribute to open source projects.
If you can think of anything specific that you could use some help with
please let me know.
Thanks,
Ion Savin
6 years, 1 month
Hot Rod secured by default
by Tristan Tarrant
Dear all,
after a mini chat on IRC, I wanted to bring this to everybody's attention.
We should make the Hot Rod endpoint require authentication in the
out-of-the-box configuration.
The proposal is to enable the PLAIN (or, preferably, DIGEST) SASL
mechanism against the ApplicationRealm and require users to run the
add-user script.
This would achieve two goals:
- secure out-of-the-box configuration, which is always a good idea
- access to the "protected" schema and script caches which is prevented
when not on loopback on non-authenticated endpoints.
Tristan
--
Tristan Tarrant
Infinispan Lead
JBoss, a division of Red Hat
6 years, 1 month
PersistentUUIDManagerImpl NPEs being logged when running the testsuite
by Sanne Grinovero
Hi all,
I'm building master [1] and see such NPEs dumped on my terminal quite
often; I guess you all noticed already? I couldn't find a JIRA..
16:24:03,083 FATAL
(transport-thread-StateTransferLinkFailuresTest[null,
tx=false]-NodeN-p63985-t2) [PersistentUUIDManagerImpl] Cannot find
mapping for address StateTransferLinkFailuresTest[null,
tx=false]-NodeN-32100 java.lang.NullPointerException
at org.infinispan.topology.PersistentUUIDManagerImpl.mapAddresses(PersistentUUIDManagerImpl.java:70)
at org.infinispan.partitionhandling.impl.PreferAvailabilityStrategy.onPartitionMerge(PreferAvailabilityStrategy.java:214)
at org.infinispan.topology.ClusterCacheStatus.doMergePartitions(ClusterCacheStatus.java:597)
at org.infinispan.topology.ClusterTopologyManagerImpl.lambda$recoverClusterStatus$6(ClusterTopologyManagerImpl.java:519)
at org.infinispan.executors.LimitedExecutor.runTasks(LimitedExecutor.java:144)
at org.infinispan.executors.LimitedExecutor.access$100(LimitedExecutor.java:33)
at org.infinispan.executors.LimitedExecutor$Runner.run(LimitedExecutor.java:174)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
16:24:03,115 FATAL
(transport-thread-StateTransferLinkFailuresTest[null,
tx=false]-NodeQ-p64193-t5) [PersistentUUIDManagerImpl] Cannot find
mapping for address StateTransferLinkFailuresTest[null,
tx=false]-NodeQ-10499 java.lang.NullPointerException
at org.infinispan.topology.PersistentUUIDManagerImpl.mapAddresses(PersistentUUIDManagerImpl.java:70)
at org.infinispan.partitionhandling.impl.PreferAvailabilityStrategy.onPartitionMerge(PreferAvailabilityStrategy.java:214)
at org.infinispan.topology.ClusterCacheStatus.doMergePartitions(ClusterCacheStatus.java:597)
at org.infinispan.topology.ClusterTopologyManagerImpl.lambda$recoverClusterStatus$6(ClusterTopologyManagerImpl.java:519)
at org.infinispan.executors.LimitedExecutor.runTasks(LimitedExecutor.java:144)
at org.infinispan.executors.LimitedExecutor.access$100(LimitedExecutor.java:33)
at org.infinispan.executors.LimitedExecutor$Runner.run(LimitedExecutor.java:174)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
1 - cc2744e9f509d917f1ed0ff1a18b28b72595af83
Thanks,
Sanne
6 years, 2 months
JDK 10 Early Access b40 & JDK 8u172 Early Access b02 are available on jdk.java.net
by Rory O'Donnell
Hi Galder,
Happy New Year!
*OpenJDK builds - *JDK 10 Early Access build 40 is available at
http://jdk.java.net/10/
* These early-access, open-source builds are provided under the GNU
General Public License, version 2, with the Classpath Exception
<http://openjdk.java.net/legal/gplv2+ce.html>.
* Summary of changes :-
https://download.java.net/java/jdk10/archive/40/jdk-10+40.html
*JDK 10 will enter Rampdown Phase Two on Thursday the 18th of January,
2018. *
* More details , see Mark Reinhold's email to jdk-dev mailing list [1]
* The Rampdown Phase Two process will be similar to that of JDK 9 [2].
* JDK 10 Schedule, Status & Features are available [3]
*JDK **8u172 Early-Access build 03*is available at :-
http://jdk.java.net/8/
* Summary of Changes here :-
https://download.java.net/java/jdk8u172/changes/jdk8u172-b02.html
<http://openjdk.java.net/projects/jdk8u/releases/8u162.html>
Regards,
Rory
[1] http://mail.openjdk.java.net/pipermail/jdk-dev/2018-January/000416.html
[2] http://openjdk.java.net/projects/jdk/10/rdp-2
[3] http://openjdk.java.net/projects/jdk/10/
--
Rgds,Rory O'Donnell
Quality Engineering Manager
Oracle EMEA, Dublin,Ireland
6 years, 3 months
Status 2018/01/15
by Sebastian Laskawiec
Hey guys,
Sorry I couldn't attend the community meeting. Here are my bits:
- Rebased and refreshed Synchronous Get PR:
https://github.com/infinispan/infinispan/pull/5262
- Upgraded Netty: https://github.com/infinispan/infinispan/pull/5676
- Started working on Single Port. The implementation will be very
similar to REST's HTTP/1.1 Upgrade and TLS/ALPN negotiation. I'm trying to
reuse as much code as I can so there will be a lot of refactoring going on.
I hope to have a POC till the end of the week and then tidy it up and send
a PR.
And of course, welcome Osni to the team!! We are happy to have you!
Thanks,
Sebastian
6 years, 3 months
