[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15507541#comment-15507541 ] ASF GitHub Bot commented on THRIFT-1108: Github user jfarrell closed the pull request at: https://github.com/apache/thrift/pull/1091 > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15507542#comment-15507542 ] ASF GitHub Bot commented on THRIFT-1108: Github user jfarrell commented on the issue: https://github.com/apache/thrift/pull/1091 Thanks for the patch,Committed, 04e6f62 > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15504642#comment-15504642 ] ASF GitHub Bot commented on THRIFT-1108: GitHub user mansinahar opened a pull request: https://github.com/apache/thrift/pull/1091 THRIFT-1108: Adding SSL support for ruby You can merge this pull request into a Git repository by running: $ git pull https://github.com/mansinahar/thrift thrift-ruby-ssl Alternatively you can review and apply these changes as the patch at: https://github.com/apache/thrift/pull/1091.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #1091 > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13115519#comment-13115519 ] Jake Farrell commented on THRIFT-1108: -- Alex, the ruby build has been reworked recently and should be easier for you to use on different systems. Can you add some test cases and make sure this works with each transport > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13021834#comment-13021834 ] Alex commented on THRIFT-1108: -- When I get a chance I will put in that version specific behavior. Regarding the test case, I already figured out why the patch fails and have fixed the problem. > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13021782#comment-13021782 ] Michael Stockton commented on THRIFT-1108: -- We've tried to keep thrift working with 1.8 and 1.9. I think your patch would need to include support for both to be accepted. If you look at the gem I referenced, it merely adds nonblocking methods to OpenSSL::SSL::SSLSocket. You can use the RUBY_VERSION constant to conditionally require openssl-nonblock. If you include a test case in your patch which fails, it may be easier for me to see the problem you're having. Again, for inclusion, we'd ideal want SSL support to work with each transport. > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13020817#comment-13020817 ] Alex commented on THRIFT-1108: -- It seems that the Rakefile was written for a very old version of rspec, and as such it is not working on my system. > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[
https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13016075#comment-13016075
]
Michael Stockton commented on THRIFT-1108:
--
Alex, I'm still not sure if your call to @handle.connect_nonblock will work on
ruby-1.8.7 without using the openssl-nonblock gem. Can you clarify how this
will work?
I was thinking more along the lines of having a method which a subclass can
override which return what @handle should be -- whether than be an ssl socket
or regular socket. This way, you avoid a superclass and subclass both defining
@handle.
Have you though about supporting cert and key options? If not, it may be better
to replace "ca=nil" in the constructor with "ssl_options = {}". Worst case,
someone can add support later without affecting the constructor's arguments.
Your patch is looking better but we really need test code to go along with it.
What problem are you having with rspec?
> SSL support for the Ruby library
> -
>
> Key: THRIFT-1108
> URL: https://issues.apache.org/jira/browse/THRIFT-1108
> Project: Thrift
> Issue Type: Improvement
> Components: Ruby - Library
>Affects Versions: 0.6
>Reporter: Alex
>Priority: Minor
> Labels: ssl
> Attachments: ssl_support.diff
>
>
> Attached are modified versions of the socket and server_socket files which
> include SSL support. I do not consider these implementations complete,
> however they work well for my purposes.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13014907#comment-13014907 ] Alex commented on THRIFT-1108: -- I've attached a patch that makes more sense. I did not add test code because I am unable to get the rspec stuff in the SVN repo working properly. If I can get it to work then I will create a spec and attach it. > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13014688#comment-13014688 ] Michael Stockton commented on THRIFT-1108: -- Alex, I'm not sure if it makes sense to use @handle.connect. You can't open an SSLSocket in a non-blocking fashion which makes the select loop and other logic pointless. https://github.com/tarcieri/openssl-nonblock It appears non-blocking methods were added to SSL in ruby-1.9.2. It would be nice to have this work with pre 1.9.2 so you have to add a dependency on the openssl-nonblock gem. With the nonblock gem or ruby-1.9.2, I think you'll be able to slim this patch down further if you merely make the same calls to an ssl socket or regular socket. Can you also add some test code? See lib/rb/spec/. Michael > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13014367#comment-13014367 ] Alex commented on THRIFT-1108: -- You made a good point about the code being duplicated. I've fixed it up a bit and attached it as a patch (against revision 1087555) as requested. > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_support.diff > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (THRIFT-1108) SSL support for the Ruby library
[ https://issues.apache.org/jira/browse/THRIFT-1108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13014074#comment-13014074 ] Michael Stockton commented on THRIFT-1108: -- Alex, Can you submit your changes as a diff? Patches are preferred over individual files. I took a quick glance and it looks like your ssl_socket.rb is very similar to thrift/transport/socket.rb. I see room to de-duplicate a lot of code there. Same goes for ssl_server_socket.rb. Michael > SSL support for the Ruby library > - > > Key: THRIFT-1108 > URL: https://issues.apache.org/jira/browse/THRIFT-1108 > Project: Thrift > Issue Type: Improvement > Components: Ruby - Library >Affects Versions: 0.6 >Reporter: Alex >Priority: Minor > Labels: ssl > Attachments: ssl_server_socket.rb, ssl_socket.rb > > > Attached are modified versions of the socket and server_socket files which > include SSL support. I do not consider these implementations complete, > however they work well for my purposes. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira
