[JBoss JIRA] Created: (ISPN-907) SSL access to Hot Rod
by Galder Zamarreño (JIRA)
SSL access to Hot Rod
---------------------
Key: ISPN-907
URL: https://issues.jboss.org/browse/ISPN-907
Project: Infinispan
Issue Type: Feature Request
Components: Cache Server
Reporter: Galder Zamarreño
Assignee: Galder Zamarreño
Fix For: 5.0.0.BETA1, 5.0.0.Final
Investigate and integrate Adrian's patch for Hot Rod server so that it can accessed via SSL.
Email from Adrian:
"While I remember heres a patch to add ssl for infinispan clients.
I did it a couple of weeks ago, but I dont know when Ill have time
to finish it off/polish it. It was based on head a few weeks ago,
but I dont remember which version. :-(
The horrible part is the way I had to modify all the parameter lists.
It could really do with passing some config object instead.
I dont know how to make "git diff" include new uncommitted files so Ive attached them
seperately.
See the test for how to use it, but it is basically set the config properties
(with the relevant infinispan package prefixes)
use_ssl=true
key_store_file_name=jks file containing our key
key_store_password=secret
trust_store_file_name=jks file containing public keys we trust for authentication
trust_store_password=another-secret
Optionally you can get the server to authenticate the client as well
need_client_auth=true
which means the server will need a trust store.
I've also left it so if you dont set the properties it will use the default implementations.
But this doesnt work out of the box unless you enable the "anon" alogorithms on
the server, they aren't enabled by default. Those dont authenticate, they just encrypt the traffic.
The main thing left to do would be change the test to get maven to generate the
key/trust store in a well defined place in "target".
Other comments:
* The code on the serrver will also work for other protocols as well, e.g. memcached
if the client supports ssl
* The ssl context construction is pretty similar in the client/server
and could probably be shared if I knew where to put shared stuff in the codebase. :-)
* There is some commented out bits where I think the client/server should really
be adding socket timeouts. Otherwise network drops/splits could cause the connection
to hang forever. There should at least be a connection timeout on the socket construction,
if you dont want to implement a full blown ping to continually test the connection rather
than just ping on start - which doesnt run until after the connection timeout is needed.
* I had to modify the system property handling so you can have a default of "null".
I only did this for Strings, might not be relevant for others?
* Why doesnt the client side do system property replacement like the server?
* Theres a lot of places in the code doing
InputStream is = openStream();
useIt(is);
but never close the stream. While this is probably ok in infinispans use cases
it is not good practice to leave files open for the gc to close - that could take a while
to happen and you are hogging system resources.
Either useIt() should close the stream or the code should be
InputStream is = openStream();
try {
useIt(is);
}
finally {
is.close();
}
Feel free to post whatever parts of this message you like in the infinispan forum. :-)"
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 1 month
[JBoss JIRA] (ISPN-1757) Use a ConsistentHashFactory for consistent hash configuration
by Dan Berindei (JIRA)
Dan Berindei created ISPN-1757:
----------------------------------
Summary: Use a ConsistentHashFactory for consistent hash configuration
Key: ISPN-1757
URL: https://issues.jboss.org/browse/ISPN-1757
Project: Infinispan
Issue Type: Task
Reporter: Dan Berindei
Assignee: Pete Muir
The new programmatic configuration allows the user to configure a consistent hash with `HashConfigurationBuilder.consistentHash(ConsistentHash)`.
Since we always create new instances of the consistent hash, I think it would be nicer if we had `HashConfigurationBuilder.consistentHashFactory(ConsistentHashFactory)` instead.
This would also allow us to have a single default factory that can choose between creating a `DefaultconsistentHash` or a `TopologyAwareConsistentHash` based on the transport configuration.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 1 month
[JBoss JIRA] (ISPN-1523) Remote nodes send duplicate invalidation messages
by Dan Berindei (Created) (JIRA)
Remote nodes send duplicate invalidation messages
-------------------------------------------------
Key: ISPN-1523
URL: https://issues.jboss.org/browse/ISPN-1523
Project: Infinispan
Issue Type: Bug
Components: Distributed Cache
Reporter: Dan Berindei
Assignee: Manik Surtani
I though only the originator should send invalidation messages, but I'm seeing these messages in the log:
{noformat}
2011-11-11 11:10:27,608 TRACE (OOB-2,Infinispan-Cluster,NodeD-8993) [org.infinispan.interceptors.DistributionInterceptor] Put occuring on node, requesting cache invalidation for keys [k1]. Origin of command is remote
2011-11-11 11:10:27,608 TRACE (OOB-3,Infinispan-Cluster,NodeA-31187) [org.infinispan.interceptors.DistributionInterceptor] Put occuring on node, requesting cache invalidation for keys [k1]. Origin of command is remote
2011-11-11 11:10:27,608 TRACE (OOB-2,Infinispan-Cluster,NodeD-8993) [org.infinispan.distribution.L1ManagerImpl] Invalidating L1 caches for keys [k1]
2011-11-11 11:10:27,608 TRACE (OOB-3,Infinispan-Cluster,NodeA-31187) [org.infinispan.distribution.L1ManagerImpl] Invalidating L1 caches for keys [k1]
{noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 1 month
[JBoss JIRA] Created: (ISPN-820) Resolve {@link} links in configuration reference
by Galder Zamarreño (JIRA)
Resolve {@link} links in configuration reference
-------------------------------------------------
Key: ISPN-820
URL: https://jira.jboss.org/browse/ISPN-820
Project: Infinispan
Issue Type: Feature Request
Reporter: Galder Zamarreño
Assignee: Vladimir Blagojevic
Fix For: 5.0.0.BETA1
Currently configuration reference documentation does not resolve {@link} links.
It'd be nice if it'd point to the javadoc of the corresponding class if available!
Examples:
- Fully qualified class name of a class that looks up a reference to a {@link javax.transaction.TransactionManager}. The default provided is capable of locating the default TransactionManager in most popular Java EE systems, using a JNDI lookup. (Javadoc)
- Fully qualified name of the class that the configured {@link org.infinispan.marshall.Externalizer} can marshall/unmarshall. Establishing the link between type marshalled and {@link org.infinispan.marshall.Externalizer} implementations enables users to provide their own marshalling mechanisms even for classes which they cannot modify or extend. (Javadoc)
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years, 1 month