[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
Hi !! I tried you said me and these are the results: If I launch the server with ssl configuratin changing the factories, i.e., jacorb.ssl.socket_factory=org.jacorb.orb.factory.DefaultSocketFactory jacorb.ssl.server_socket_factory=org.jacorb.orb.factory.DefaultServerSocketFactory appear the following error: 12:41:25,578 ERROR [giop] org.jacorb.orb.factory.DefaultSocketFactory.(org.jacorb.orb.ORB) 12:41:25,593 ERROR [CorbaORBService] Starting failed jboss:service=CorbaORB java.lang.RuntimeException: SSL support is on, but the ssl socket factory can't be instantiated (org.jacorb.orb.factory.DefaultSocketFactor y.(org.jacorb.orb.ORB))! - If I launch server with ssl configuration but with jacorb.security.ssl_components_added_by_ior_interceptor=off this error appears in the client side: excepcion System.IO.IOException: no GIOP-Message Server stack trace: at Ch.Elca.Iiop.GiopHeader..ctor(CdrInputStreamImpl stream) at Ch.Elca.Iiop.GiopTransportClientMsgHandler.ReadResponseMessage() at Ch.Elca.Iiop.GiopTransportClientMsgHandler.ReceiveResponseMessage(UInt32 reqNr) at Ch.Elca.Iiop.GiopTransportClientMsgHandler.ProcessResponse(UInt32 forReqId, ITransportHeaders responseHeaders) at Ch.Elca.Iiop.IiopClientTransportSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportH eaders responseHeaders, Stream responseStream) at Ch.Elca.Iiop.IiopClientFormatterSink.SyncProcessMessage(IMessage msg) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData msgData, Int32 type) at omg.org.CosNaming.NamingContext.resolve(NameComponent[] nameComponents) at clientedotnet.CMyClase.Main(String[] args) in d:\ejemplo jose luis\clientenfastultra\Class1.cs:line 84 With regard to jacorb.ior_proxy_host=1.2.3.4 jacorb.ior_proxy_port=4711 In proxy host I write my IP server, but what port have I write in proxy_port? The only one that don't throw an error message is 3528, with non ssl configuration but the client side throw the same error above. Any idea? Thanks and regards View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874635#3874635 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874635 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
Maybe the IORInterceptor is the cleanest solution after all :) It needs some more careful examination since the various pieces are already there and it could just be a matter of configuration, I just haven't looked at it in much detail... Franscisco may know how to setup this? A little dirty hack would be to just subclass DefaultServerSocketFactory and privide dummy implementions for the 2-3 extra SSLServerSocketFactory methods to pass the initial construction step. Then configure for ssl as usual... View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874660#3874660 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874660 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
Thank you very much, I'll wait your solution. Best regards Javier View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874666#3874666 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874666 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
I don't know exactly how ssl accelerators works, but would the exported IOR need to contain the host/ssl port of the accelerator? Another idea to try may be to configure normally the server for ssl, but use a plain (non-ssl) connection factory, maybe? View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874433#3874433 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874433 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
First at all, thanks The ssl accelerator create a proxy with an external port and an internal port. SSL traffic enter to external port. The card desencrypts the traffic and moves it (now it's plain text) to the internal port. I configured the proxy with 3529 (external port) and 3528(internal port). The key and certificate pair is created and stored in the card. I'll try to use a plain connection factory with SSL configuration. Do you have any other idea? Thanks and regards Javier View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874442#3874442 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874442 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
Hi Dimitris, Could you say in what file I have to change the connection factory, and which are the factories? Thanks View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874464#3874464 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874464 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss IIOP on JBoss] - Re: IIOP.NET under SSL with SSL accelerator card
I just checked and it probably won't work because SSLServerSocketFactory is a subinterface of ServerSocketFactory, so it'll probably won't accept a value of org.jacorb.orb.factory.DefaultServerSocketFactory (try that anyways :) All the relevant entries are in conf/jacorb.properties (in the 'all' configuration). You can try also to see if that does the trick jacorb.security.support_ssl=on jacorb.security.ssl_components_added_by_ior_interceptor=off I guess you want to set those 2 as well, to the address/port of the accelerator card: jacorb.ior_proxy_host=1.2.3.4 jacorb.ior_proxy_port=4711 View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3874475#3874475 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3874475 --- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ___ JBoss-Development mailing list JBoss-Development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-development
