[Security & JAAS/JBoss] - Apache mod_jk / JBoss SSL question
by bezdomny
I've seen this asked many times and I think I have an answer that works for my particular situation.
Please tell me if I'm right or wrong as I need to get my app deployed by next week.
I have a site that MUST be SSL enabled for all pages, including login. Instead of enabling SSL in JBoss, I'm using my site's existing cert that is used by Apache. I'm using mod_rewrite like this inside both virtual hosts:
<VirtualHost blah.mysite.com:443>
ServerAdmin webmaster(a)dummy-host.example.com
DocumentRoot "D:/usr/dev/web/mypath"
ServerName blah.mysite.com
DirectoryIndex index.html
ErrorLog logs/blah-error_log
CustomLog logs/blah-access_log common
SSLEngine on
SSLCertificateFile "C:\Program Files\Apache Group\Apache2\ssl\mycert.cert"
SSLCertificateKeyFile "C:\Program Files\Apache Group\Apache2\ssl\mykey.key"
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*)$ https://blah.mysite.com/$1 [L,R]
<VirtualHost blah.mysite.com:80>
ServerAdmin webmaster(a)dummy-host.example.com
DocumentRoot "D:/usr/dev/web/mypath"
ServerName blah.mysite.com
DirectoryIndex index.html
ErrorLog logs/blah-error_log
CustomLog logs/blah-access_log common
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*)$ https://blah.mysite.com/$1 [L,R]
So this says that any request to any of these virtual hosts that ISN'T on port 443 is then redirected using the https: scheme.
Is this an exceptable way to require SSL when Jboss is used with Apache and mod_jk?
Thanks for the help. The reason why I don't want to enable SSL in JBoss directly is complicated. I work in a big corp environment and they don't like making changes from regular certs to java keystores and the like.
B
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957132#3957132
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3957132
20 years, 1 month
[JBossCache] - JBoss Cache 1.4.0.GA
by manik.surtani＠jboss.com
I'm proud to announce that JBoss Cache 1.4.0 "Jalapeno" has just been released.
I'd like to thank all those who contributed to this very important release, the community which is the driving force behind this project, and everybody who've been very patient in waiting for this release despite unavoidable delays.
This release marks huge performance improvements in replication throughput, as well as overall PojoCache performance. In addition, big new features such as Buddy Replication and Data Gravitation are now in production, which open up interesting possibilities for the scalability of your clustered application.
Here are some previous articles and posts regarding JBoss Cache 1.4.0 "Jalapeno":
JBoss Cache on Steroids
PojoCache Performance
Download JBoss Cache 1.4.0 "Jalapeno" here.
Read about JBoss Cache 1.4.0 "Jalapeno" here.
Talk about JBoss Cache 1.4.0 "Jalapeno" here.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957129#3957129
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3957129
20 years, 1 month
[News & Announcements] - JBossCache 1.4.0.GA released
by rrajesh
JBossCache 1.4.0.GA has been released and is available for download on Sourceforge at
http://sourceforge.net/project/showfiles.php?group_id=22866&package_id=10...
Release 1.4.0.GA
A new feature release containing very significant performance enhancements in replication, pojo operations and cache loaders, as well as features such as buddy replication.
Changes:
** Sub-task
* [ JBCACHE-77 ] Create an eviction policy based on number of elements instead of nodes
* [ JBCACHE-458 ] Improve documentation on the configuration of state transfer
* [ JBCACHE-509 ] OOM during perf test under repl_sync mode
* [ JBCACHE-511 ] JBossCache payload size
* [ JBCACHE-520 ] JBossCache thruput I
* [ JBCACHE-521 ] Optimize modification list over the wire
* [ JBCACHE-553 ] JBossCache throughput II
* [ JBCACHE-556 ] Validate the original and the new api classes work under AS integration test
* [ JBCACHE-557 ] Make sure tutorial and PojoCache examples work with new PojoCache class name
* [ JBCACHE-558 ] Updated JBossCache documentation for PojoCache
* [ JBCACHE-560 ] Renamed PojoCache eviction policy
* [ JBCACHE-574 ] Optimize PojoCache in local mode
* [ JBCACHE-575 ] Optimize PojoCache in replicated mode
* [ JBCACHE-580 ] Refactored Collection interceptor impl
* [ JBCACHE-601 ] Use bulk update and remove for putObject
* [ JBCACHE-607 ] PojoCache uses _get to bypass lock and tx interceptors during putObject and removeObject
* [ JBCACHE-630 ] Modify ExtendedCacheLoader.storeState(byte[], Fqn) contract to support storage under _BUDDY_BACKUP_ subtree
* [ JBCACHE-631 ] If Buddy replication is used, cache loader must implement ExtendedCacheLoader
* [ JBCACHE-640 ] Collection class add/remove POJO needs to go through transaction as well
** Feature Request
* [ JBCACHE-61 ] Buddy Replication
* [ JBCACHE-76 ] Create an eviction interceptor
* [ JBCACHE-198 ] ReplicationInterceptor: replace remote method calls with message ids
* [ JBCACHE-451 ] Support @Transient annotation
* [ JBCACHE-454 ] Support @Serialize annotation
* [ JBCACHE-490 ] Create a new class name POJOCache to replace TreeCacheAop
* [ JBCACHE-504 ] Optimise marshalling of Fqn, GlobalTransaction, etc
* [ JBCACHE-505 ] Optimise references when streaming data on the wire
* [ JBCACHE-516 ] putObject() should check for "__jboss::internal__" keys
* [ JBCACHE-525 ] Add JDBM cache loader support to TreeCache
* [ JBCACHE-526 ] Timed and/or batched synchronization of Async CacheLoader operations
* [ JBCACHE-528 ] Make eviction a configurable option without passivation
* [ JBCACHE-535 ] CacheLoaderInterceptor fetches data overwritten by CacheLoader.put(Fqn n, Map m)
* [ JBCACHE-537 ] state transfer code to exclude under /_buddy_backup_ when marshalling the tree
* [ JBCACHE-538 ] overloading the local state transfer method with a root under which state would be stored
* [ JBCACHE-555 ] Reduce memory and increase basic performance
* [ JBCACHE-559 ] If setUseMarshalling is not set on one node, get unhelpful EOFException
* [ JBCACHE-564 ] Improve region matching algorithm in RegionManager
* [ JBCACHE-581 ] Performance of Method.equals
* [ JBCACHE-613 ] Provide skipLockInterceptor option for get and put
* [ JBCACHE-620 ] Max Age attribute on LRU cache policy
* [ JBCACHE-624 ] PojoCache add an option to handle non-instrumented POJO and non-Serializable replication
* [ JBCACHE-628 ] Expose PojoCache.getCachedType() in PojoCacheMBean
* [ JBCACHE-632 ] ChainingCacheLoader implements ExtendedCacheLoader
* [ JBCACHE-637 ] OPtion to bypass data gravitation
* [ JBCACHE-642 ] Flag to remove the FileCacheLoader content upon startup
* [ JBCACHE-652 ] create a special LRUAlgorithm with a inUse requirement
* [ JBCACHE-670 ] Create a tools directory in the dist to provide example Ant scripts for PojoCache pre-compiler.
** Bug
* [ JBCACHE-352 ] Doing cache.remove() when a tx is running and a cacheloader is present, and doing a cache.get() within the same tx causes the cache to load the value from the cacheloader again
* [ JBCACHE-435 ] Multiple attempts to remove an AOP object on putObject()
* [ JBCACHE-477 ] Random removeing from Map/Collection in a transaction throws a IllegalStateException (InternalDelegate.resetRefCount(). Ref counter not -1 but 0 at fqn:...)
* [ JBCACHE-491 ] EvictionException in JBossCache-1.2.4
* [ JBCACHE-531 ] cache loader file location property isn't parsed correctly under JBoss AS
* [ JBCACHE-532 ] Calling getRegion() before getRegions() on RegionManager may cause a condition where the defaultRegion always gets used.
* [ JBCACHE-536 ] CacheStoreInterceptor does not erase old attributes with TreeCache.put(Map) call
* [ JBCACHE-539 ] Incorrect path specified in runShellDemo.sh
* [ JBCACHE-548 ] Transaction synchronisation afterCompletion() fails when using WebLogic TM
* [ JBCACHE-551 ] TreeCache.getKeys() -- null or empty set for no attributes
* [ JBCACHE-554 ] Nodes created in CacheLoaderInterceptor not rolled back in tx
* [ JBCACHE-573 ] Beanshell script errors while running examples
* [ JBCACHE-577 ] JUnit timeout problems
* [ JBCACHE-579 ] FileCacheLoader throws NPE if location points to a file instead of a directory.
* [ JBCACHE-587 ] Fqn.getName() directly casts to String
* [ JBCACHE-592 ] JBossCache AS integration produces exception
* [ JBCACHE-596 ] Building Distribution fails - JBossCache 1.4.0.Alpha
* [ JBCACHE-597 ] Test failure - org.jboss.cache.aop.ReplicatedObjectGraphAopTest
* [ JBCACHE-598 ] Test failure - org.jboss.cache.aop.eviction.AopLRUPolicyUpdateEvictionTest
* [ JBCACHE-599 ] Plain Cache tutorial example broken.
* [ JBCACHE-600 ] PojoCache sensor example broken
* [ JBCACHE-604 ] org.jgroups.MethodCall writes a classReferences to AOPProxy what is not valid
* [ JBCACHE-606 ] TimeoutException (and lock ownership problem) under load test
* [ JBCACHE-608 ] Cache loader does not load data for cache.get(Fqn fqn) calls
* [ JBCACHE-612 ] Race condition with 2-PC and pessimistic locking
* [ JBCACHE-614 ] AS4.0.4 integration error
* [ JBCACHE-615 ] Test failure - org.jboss.cache.buddyreplication.BuddyPoolBroadcastTest
* [ JBCACHE-616 ] Package org.jboss.cache.data missing in distribution (JBossCache 1.4.0.Beta)
* [ JBCACHE-622 ] TreeCache.getChildrenNames(fqn), in certain circumstances, wipes cache tree nodes that are children of fqn
* [ JBCACHE-626 ] PojoCache bug in annotation checking optimization
* [ JBCACHE-634 ] Using optimistic locking and setting UseMarshalling to true causes replication exceptions.
* [ JBCACHE-635 ] Illegal characters in buddy backup node names
* [ JBCACHE-636 ] Data Gravitation should pull back entire subtrees
* [ JBCACHE-639 ] PojoCache fails to retry to with RollbackException using Collection
* [ JBCACHE-641 ] Eviction policy emits too many notification events
* [ JBCACHE-646 ] Test failure - org.jboss.cache.loader.InterceptorSynchronizationTest (JBossCache 1.4.0.Beta2)
* [ JBCACHE-647 ] Interop tests failure (JBossCache 1.4.0.Beta2)
* [ JBCACHE-648 ] Exception during addNode in sensor example
* [ JBCACHE-649 ] IdentityLock.getFqn() always returns Fqn.ROOT
* [ JBCACHE-653 ] Classloader leakage during re-deployment
* [ JBCACHE-655 ] Cache under transaction should allow mix of LOCAL or REPL mode option
* [ JBCACHE-659 ] Evictions with Optimistic Locking not working
* [ JBCACHE-661 ] Serious concurrency issue with empty Cache & CacheLoader
* [ JBCACHE-662 ] missing synchronization on TreeCache "members"
* [ JBCACHE-668 ] Failure in synchronous remote commit() call leads to unreleased locks.
* [ JBCACHE-669 ] With buddy replication, PojoCache cannot find shared objects from a secondary pojo
* [ JBCACHE-682 ] AbortionTest extension to close channel in beforeCompletion() fails
* [ JBCACHE-683 ] PojoTxSynchronizationHandler produces NPE during rollback
** Task
* [ JBCACHE-7 ] PojoCache benchmark and performance tuning
* [ JBCACHE-197 ] Review: can Node.data and Node.children bu a ConcurrentHashMap (efficiency)
* [ JBCACHE-203 ] PojoCache get/put/remove object apis needs to be atomic
* [ JBCACHE-333 ] Remove NestedRuntimeException (requires JDK 1.4 to be the baseline)
* [ JBCACHE-367 ] Remove dependency on eviction RegionManager from a direct reference AOP packages.
* [ JBCACHE-449 ] PojoCache when using CacheLoader is slow during putObject
* [ JBCACHE-488 ] Switch to JBoss Serialization for replication/storage
* [ JBCACHE-501 ] Need customized serialization to minimize PojoCache payload
* [ JBCACHE-508 ] JBossCache bechmark and performance tuning
* [ JBCACHE-517 ] Create a default marshaller for JBossCache
* [ JBCACHE-540 ] Be consistent between Node.getDataKeys and Tree.getKeys behavior
* [ JBCACHE-550 ] Properly handle marshalling for the _buddy_backup_ region
* [ JBCACHE-582 ] activateRegion() should initiate a state transfer from all DataOwners for which the cache is a buddy
* [ JBCACHE-583 ] inactivateRegion() should clear the corresponding subtree from all _buddy_backup_ regions
* [ JBCACHE-605 ] Node to re-throw lock exception with proper fqn
* [ JBCACHE-610 ] prepare methodcall has a bigger payload size
* [ JBCACHE-621 ] PojoCache to optimize Collection classes with value as primitive such as String
* [ JBCACHE-666 ] Refactored PojoCache examples directory to allow easier use of the ant tasks for users projects
* [ JBCACHE-672 ] PojoCache uses registered classloader during failover
* [ JBCACHE-678 ] Adding Troubleshooting to FAQ
* [ JBCACHE-680 ] TreeCache demo gui to update view instanteously
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957121#3957121
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3957121
20 years, 1 month