Steve,

Do you think it's a big task to implement it? There is a patch from earlier 
this year in that bug report which might be a good basis.

I'd prefer not to use an SSL stack written in a non-memory safe language. 
Perhaps I'm swapping one set of problems for another, but a Java SSL 
implementation seems to mitigate the scariest risks.

Also, I use continuations for long polling, which may not necessarily work that 
efficiently with all proxies.

It seems like Netty's API is more amenable to supporting SNI 
https://github.com/grahamedgecombe/netty-sni-example . Maybe swapping to that 
or using it as a proxy would be a solution.

Thanks.

Ben



Steve Sobol - Lobos Studios [email protected] wrote:
> 
> Ben, if you (or anyone else) would like to know how my working Apache >> 
> Jetty proxy is set up, I'll be happy to share configs - just ask.
> 
> Steve Sobol - Lobos Studios wrote:
>> This is something I've been asking about. It's a low priority for the 
>> Jetty team. It was suggested that I could contribute a fix, and 
>> there's certainly enough information in Bugzilla that I could do it 
>> pretty easily, but paying projects have priority and I have a couple 
>> big deadlines to meet. I would love to contribute a fix when I have 
>> time, though.
>> 
>> Right now, as a workaround, I have a server dedicated to J2EE apps, 
>> running Jetty, and I threw Apache 2.4 on that box and am using it and 
>> mod_proxy to proxy HTTPS requests to Jetty (because Apache 2.4 speaks 
>> SNI).
>> 
>> Ben Summers wrote:
>>> Hello,
>>> 
>>> Now Java 8 has SNI support, and the ability to set the cipher suite order, 
>>> are there any plans to add support in Jetty?
>>> 
>>> I see from Bugzilla that some work has been done on support, is this 
>>> something that is likely to be added to Jetty in the near future?
>>> 
>>>  https://bugs.eclipse.org/bugs/show_bug.cgi?id=430951
>>> 
>>> I need to add SNI support (and ideally set the cipher suite order) and am 
>>> just wondering what my options are.
>>> 
>>> Many thanks,
>>> 
>>> Ben
>>> 
>>> 

_______________________________________________
jetty-users mailing list
[email protected]
To change your delivery options, retrieve your password, or unsubscribe from 
this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to