[infinispan-issues] [JBoss JIRA] (ISPN-7694) Provide JDK SSLContext/Netty OpenSSLContext bridge and allow using OpenSSL

Sebastian Łaskawiec (JIRA) issues at jboss.org
Mon Apr 3 10:15:00 EDT 2017


    [ https://issues.jboss.org/browse/ISPN-7694?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13387948#comment-13387948 ] 

Sebastian Łaskawiec commented on ISPN-7694:
-------------------------------------------

[~gustavonalle] mentioned that:
{quote}
AFAICT, Wildfly 11 should export a "org.wildfly.security.ssl-context" capability to allow plugging in custom engines.
{quote}

> Provide JDK SSLContext/Netty OpenSSLContext bridge and allow using OpenSSL
> --------------------------------------------------------------------------
>
>                 Key: ISPN-7694
>                 URL: https://issues.jboss.org/browse/ISPN-7694
>             Project: Infinispan
>          Issue Type: Feature Request
>            Reporter: Sebastian Łaskawiec
>            Assignee: Sebastian Łaskawiec
>            Priority: Critical
>
> In order to use OpenSSL with Netty (which is much faster than JDK implementation), and stick with WildFly SSL initialization, we need to provide a bridge from JDK SSLContext into OpenSSLContext. 
> The next step is to use this bridge here: https://github.com/infinispan/infinispan/blob/fd3061a684c13aa7c22d215f43910735bf7ff4a6/server/router/src/main/java/org/infinispan/server/router/router/impl/hotrod/handlers/util/SslUtils.java#L35
> Finally, we need to put {{netty-tcnative}} into the server's classpath.
> More information: http://netty.io/wiki/requirements-for-4.x.html#tls-with-openssl



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)



More information about the infinispan-issues mailing list