Hi,
I now use 1.1.9 and get:
E:\java\orion>java -jar orion.jar
Error listening to SSLServerSocket: No available certificate corresponds to
the
SSL cipher suites which are enabled.
Orion/1.1.9 initialized
What could be bad with my certificate? I have done exactly what is told in
the documentation. (See my previous post)
How do I know which "SSL cipher suites" that "are enabled"?
How does Orion know which certificate in the keystore to use? When I have
several entries in the keystore, I get:
Error starting HttpServer: Unable to intialize SSLServerSocketFactory
'com.evermind.ssl.JSSESSLServerSocketFactory': Unrecoverable key error:
Cannot recover key
I feel pretty frustrated. SSL is a must in my case and right now these
problems makes it impossible to use Orion in our project. Too bad, because
Orion seems very nice.
Could somebody that has a working SSL configuration confirm that it is
possible to make it work.
/Thanks,
Mattias
----- Original Message -----
From: "Karl Avedal" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Cc: "Orion-Interest" <[EMAIL PROTECTED]>; "Orion Bugs"
<[EMAIL PROTECTED]>
Sent: Wednesday, July 05, 2000 11:16 AM
Subject: Re: SSL -> 100% CPU
> Hello,
>
> Yes, we have found a bug related to the 100 % CPU thing. It seems that
when a bad certificate
> was used, IOException's get thrown in the ServerSocket accept() call
immediately, which is
> not the usual behaviour of a ServerSocket. We are now taking care of that
problem in a nicer
> way, and hopefully you should not get that behaviour in 1.1.9 which is
available.
>
> If you do, please let us know.
>
> Regards,
> Karl Avedal
>
> Klaus Thiele wrote:
>
> > Hi Mattias,
> >
> > > Have you found any solution to the SSL problem? I have tried for days
now
> > > without success.
> >
> > me too :(
> > i've read your posting and i tried your steps without success.
> >
> > > step1.bat:keytool -genkey -keyalg "RSA" -alias testalias -keystore
mykeystore -dname
> > > "cn=My Name, ou=MyCompany, o=MyCompany, c=SE" -storepass
123456 -keypass
> > > 654321 -validity 360
> >
> > how did you do that?
> > my keytool does not accept this parameters. i have to
remove -alias, -storepass, -keypass
> > and -validity from the commandline and then it works!?!
> >
> > step2.bat: i got following error
> > keytool error: java.lang.Exception: Failed to establish chain from
reply
> > after removing the initial keystore the import works!?!
> >
> > > Output when running the scripts:
> > same as yours.
> >
> > ==> https://my_ip_addr
> > ==> SSL -> 100% CPU :((
> >
> > i tried with WinNT and Linux, jdk 1.2.2, 1.3 and IBM-jdk1.3
> > all the same result.
> >
> > perhaps anyone from the orion-team looks for this bug(?)
> > this is one of the last "kock-out" points which must be cleared
> > before we will purchase orion.
> >
> > bye
> > klaus
> >
> > --
> > Klaus Thiele - Personal & Informatik AG
> > mailto:[EMAIL PROTECTED]
> >
> > "There's got to be more to life than compile-and-go."
>
