Dear, Thanks for your information. We have another question regarding the Mutual TLS handshake. As we understand, Dubbo support that kind of handshake connection. With that, client has to provide also a private key and a certificate for itself. But we do not know what is the different between enabling Mutual TLS handshake and not. Could you please enlighten us? What if we want to have this Mutual TLS handshake, but a new client just tries to connect without providing private key and certificate? Do they have limited features, or the connection just simply cannot established? And how to configure to have it specifically?
Best Dat On 2020/04/22 09:08:45, Jun Liu <[email protected]> wrote: > Hi, > > > the example only run if we use the Netty-all 4.1.36 > > I am not sure now why the current ssl support only works on 4.1.36 or higher. > Is it a SSL limit provided by the Netty project, for example some features > start from 4.1.36? If that is the case, I think we can simply upgrade the > netty dependency of Dubbo to 4.1.36. > > > So this means I should exclude the provided Netty version and user the > > 4.1.36 for proper SSL connection, doesn't this? > > I think you can do that for now, the provided version is only one recommend > version provided by Dubbo for convenience. I believe it can work well with > most Netty 4.x versions > > Jun > > > On Apr 21, 2020, at 9:36 PM, Tien Dat PHAN <[email protected]> wrote: > > > > Dear Jun Liu, > > > > Thanks for your link. > > I have checked the examples. It was working properly. > > My concern is that, the example only run if we use the Netty-all 4.1.36, > > while the provided Netty-all version from Dubbo 2.7.5 is 4.1.25. > > If I use the 4.1.25 (provided by Dubbo dependency by default), the SSL > > connection will fail. > > > > So this means I should exclude the provided Netty version and user the > > 4.1.36 for proper SSL connection, doesn't this? > > > > Best regards > > Tien Dat PHAN > > > > On 2020/04/17 11:30:18, Jun Liu <[email protected]> wrote: > >> Here’s one example of how to enable SSL on Dubbo > >> https://github.com/apache/dubbo-samples/tree/master/java/dubbo-samples-ssl > >> > >> Hope it can help. > >> > >> Jun > >> > >>> On Apr 15, 2020, at 5:45 PM, Tien Dat PHAN <[email protected]> wrote: > >>> > >>> Dear experts > >>> > >>> We are struggling to enable the SSL handshake between Dubbo providers and > >>> consumers. > >>> Does Dubbo community have any example to start with? Or did anyone > >>> succeed in configuring it? > >>> > >>> We understand that this is a very generic question, since the issue can > >>> originate from Netty4, from the OS or from the JDK version. > >>> We are using Dubbo 2.7.6, on CentOS 7.4 with JDK Java HotSpot(TM) 64-Bit > >>> Server VM (build 25.201-b09, mixed mode). > >>> > >>> Any experience from you experts would be helpful for us now. > >>> > >>> Thanks for your consideration > >>> Best regards > >>> Tien Dat PHAN > >> > >> > >
