Re: Disabling connectivity below 128bit encryption
Just buy a 128 bit key, enable HTTPS and dont enable HTTP. Steve - Original Message - From: Stephen Davidson [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Sent: Friday, December 21, 2001 8:53 AM Subject: Disabling connectivity below 128bit encryption Greetings. I am working with some data that needs to be kept secure. I was wondering if anyone on this list knew how to force browsers to connect at 128bit Encryption or better, or, failing that, figure out what encryption level the browser is using. -Steve -- Stephen Davidson Java Consultant Delphi Consultants, LLC http://www.delphis.com Phone: 214-696-6224 x208
Re: Persistance between HTTP and HTTPS
We came up with a fix, not sure if it will help
you. In the orion-web.xml config file, we added session-tracking
autojoin-session="true" cookies="disabled" /. We havent tested whether
or not it will still work without the cookies="disabled", or the
autojoin-session="true", but it works with both for the time being.
Steve
- Original Message -
From:
[EMAIL PROTECTED]
To: Orion-Interest
Sent: Thursday, December 06, 2001 8:44
AM
Subject: RE: Persistance between HTTP and
HTTPS
Don't know if it's related, but we've found that while we're using
HTTPS on Orion, the sesions would, seemingly at random, sometimes vanish on
us. Reasons unknown, and we haven't tracked it down
yet.
- Geoffrey
-----Original Message-From: Steve Best
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, December 05,
2001 8:07 PMTo: Orion-InterestSubject: Persistance
between HTTP and HTTPS
Greetings, we are currently experiencing what
appears to be a lack of persistance between HTTP and HTTPS, when moving
between the two on our site, and only in-frequently. Has anyone ever
experienced this problem before?
Thanks,Steve BestSystems
AdministratorSimple Devices415-637-9651 (cell)
"A little nonsense now and then, is relished by
the wisest
men."
Willy
Wonka_This
message has been checked for all known viruses by the MessageLabs Virus
Scanning Service. For further information visithttp://www.messagelabs.com/stats.asp_This
message has been checked for all known viruses by the MessageLabs Virus
Scanning Service. For further information visithttp://www.messagelabs.com/stats.asp
Persistance between HTTP and HTTPS
Greetings, we are currently experiencing what appears to be a lack of persistance between HTTP and HTTPS, when moving between the two on our site, and only in-frequently. Has anyone ever experienced this problem before? Thanks,Steve BestSystems AdministratorSimple Devices415-637-9651 (cell) "A little nonsense now and then, is relished by the wisest men." Willy Wonka
Re: Bad support
Its a lot of DIY, but seeing as I work per hour, no skin off my teeth. Steve - Original Message - From: Harold Russell [EMAIL PROTECTED] To: Orion-Interest [EMAIL PROTECTED] Sent: Sunday, November 25, 2001 2:41 AM Subject: Bad support Hi, I've been having great problems with this list. I love the product so far, but I must say the support leaves a lot to be desired __ Do You Yahoo!? Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month. http://geocities.yahoo.com/ps/info1
Re: Yup, SSL question
Nevermind, I have found the keystore and have imported the certificate. I believe my problems now have to do with our clustering/load balancing configuration. We are currently using an Alteon Acedirector 3 for our load balancer. We are also using clustering to maintain sessions. I think the error I have been getting: "Error listening to SSLServerSocket: No available certificate corresponds to the SSL cipher suites which are enabled." is because our certificate is for our virtual IP, and not for our local machine, and therefore Orion is unable to load the certificate correctly because it isnt for the local host. The question is, how do I configure Orion to load a certificate for our virtual site? Here is my configuration, with some entries modified to protect the innocent: web-site host="localhost.simpledevices.com" port="8443" cluster-island="1" secure="true" display-name="SMS WebSite" default-web-app application="sms" name="sms-web" shared="true" load-on-startup="false" / ssl-config keystore="../keys/keystore" keystore-password="123456" / frontend host="virtual.simpledevices.com" port="443"/ access-log path="../log/sms-web-access.log" //web-site I have tried setting the web-site host="[ALL]", but I get an error saying I cannot cluster with that configuration. Though I no longer get the SSLServerSocket error. Thanks for any help, Steve - Original Message - From: Steve Best To: Orion-Interest Sent: Wednesday, October 17, 2001 3:43 PM Subject: Yup, SSL question So, I do not have the original keystore file generated during the certificate request, but I have the original certificate request private key file, as well as the certificate file from Thawte. How do I get them both into a working keystore? Steve
Fw: Yup, SSL question
- Original Message - From: Steve Best To: Orion-Interest Sent: Thursday, October 18, 2001 11:35 AM Subject: Re: Yup, SSL question Nevermind, I have found the keystore and have imported the certificate. I believe my problems now have to do with our clustering/load balancing configuration. We are currently using an Alteon Acedirector 3 for our load balancer. We are also using clustering to maintain sessions. I think the error I have been getting: "Error listening to SSLServerSocket: No available certificate corresponds to the SSL cipher suites which are enabled." is because our certificate is for our virtual IP, and not for our local machine, and therefore Orion is unable to load the certificate correctly because it isnt for the local host. The question is, how do I configure Orion to load a certificate for our virtual site? Here is my configuration, with some entries modified to protect the innocent: web-site host="localhost.simpledevices.com" port="8443" cluster-island="1" secure="true" display-name="SMS WebSite" default-web-app application="sms" name="sms-web" shared="true" load-on-startup="false" / ssl-config keystore="../keys/keystore" keystore-password="123456" / frontend host="virtual.simpledevices.com" port="443"/ access-log path="../log/sms-web-access.log" //web-site I have tried setting the web-site host="[ALL]", but I get an error saying I cannot cluster with that configuration. Though I no longer get the SSLServerSocket error. Thanks for any help, Steve - Original Message - From: Steve Best To: Orion-Interest Sent: Wednesday, October 17, 2001 3:43 PM Subject: Yup, SSL question So, I do not have the original keystore file generated during the certificate request, but I have the original certificate request private key file, as well as the certificate file from Thawte. How do I get them both into a working keystore? Steve
Yup, SSL question
So, I do not have the original keystore file generated during the certificate request, but I have the original certificate request private key file, as well as the certificate file from Thawte. How do I get them both into a working keystore? Steve
Changing the default splash page?
Howdy folks, how would I go about changing the default splash page for Orion? Thanks Steve
Syntax of distributable/ tag?
What is the correct syntax for the distributable / tag, I have placed it in out web.xml file every way I can think of and I keep getting errors. Thanks Steve
Static page when db down?
Greetings, I was wondering how you can set it so that Orion will display a splash page if it is unable to connect to the db on startup? Thanks Steve
Is this fixed yet?
Just wondering if anyone has fixed SSL load balancing in Orion yet. Thanks Steve Best Unix Systems Administrator www.simpledevices.com
