Re: Restlet 2.2.2, Jetty 8.1, disable SSLv3

2014-10-25 Thread Timothy Aanerud
Jared, The additional disabledPrototols parameter worked for me. But I also set the list of enabled ciphers with this: private static String _mediumStrongCiphers = // A list found on jetty website 25-Oct-2014 TLS_DHE_DSS_WITH_AES_128_CBC_SHA + TLS_DHE_RSA_WITH_AES_128_CBC_SHA +

Re: lib/org.restlet.ext.ssl.jar missing from 2.2.2 zip

2014-08-20 Thread Timothy Aanerud
Robert, PkixSslContextFactory has moved to org.restlet.ext.jsslutils.jar Check your start up code, do you have a line like this: parameters.add(sslContextFactory, org.restlet.ext.ssl.PkixSslContextFactory); Either comment out this line or fix the package name here. -- Timothy Aanerud

Re: Enable only selected cipher suites

2012-06-20 Thread Timothy Aanerud
to Grizzly and that made things work again. -- Timothy Aanerud On 6/20/2012 8:56 PM, Enoch wrote: Im using Restlet with embedded Jetty. I have a requirement of being able to enable only selected cipher suites. I primarily use embedded Jetty anyway I have also tried Simple HTTP Server

Re: Broken pipe / Unexpected end of file from server Problem

2010-09-14 Thread Timothy Aanerud
I end up switching HTTP connectors to solve my problem. In my scenario I have client application running on Fedora using restlet using the Apache HTTP connector that talks to a restlet server running on Ubuntu using the Grizzly HTTP connector. The conditions you are describing are match what I

Re: Re: Redirect Restlet console statements to an external log file using log4j.properties

2009-10-19 Thread Timothy Aanerud
It only takes one additional import and one line of code plus 3 jar files to get Restlet console messages logged. After you have setup log4j add the line On Mon, Oct 19, 2009 at 12:01 AM, Ty ty.new...@copperchipgames.com wrote: Hi, I had a look at the user guide for v1 and v2 and am still

Re: Re: Redirect Restlet console statements to an external log file using log4j.properties

2009-10-19 Thread Timothy Aanerud
Try again... It only takes one additional import, one line of code and three additional jar files to get Restlet outputs merged into log4j. After you initialize Log4j, add this line of code: SLF4JBridgeHandler.install() These are the three additional jars: - jul-to-slf4j-1.5.8.jar --

RE: Re: Disabling weak ciphers in Restlet

2009-10-17 Thread Timothy Aanerud
Thanks! Three comments: 1. I ended up using parameters.add(enabledCipherSuites, aStringOfCiphers) At this level the ciphers are in a single string separated by a space. They eventually end up as array 2. I wasn't able to use disabledCipherSuites because deep down in HttpsServerHelper.start()

Disabling weak ciphers in Restlet

2009-10-16 Thread Timothy Aanerud
I've been working on making my server PCI (Payment Card Industry) compliant. When my site is scanned one of the vulnerabilities reported is that my site allows the use of weak SSL ciphers. I've been looking through the documentation for jsslutils and SSLContextFactory; but I don't understand

Re: Premature EOF / Broken Pipe

2009-07-15 Thread Timothy Aanerud
Several days of over night testing showed that my application would still intermittently fail. Switching the order of the messages just reduced the incident rate. -- Timothy. On Wed, Jul 1, 2009 at 1:52 PM, Timothy Aanerud taane...@aticonsulting.comwrote: ... In my actual application I have

Re: Premature EOF / Broken Pipe

2009-07-15 Thread Timothy Aanerud
httpclient. I'm going to run my client over night and see if I have any errrors. -- Timothy Aanerud On Sun, Jul 5, 2009 at 6:27 AM, Jerome Louvel jerome.lou...@noelios.comwrote: Hi Timothy, Thanks for updating us. Let’s keep an eye on it and if you find a way to reproduce it, please let us

Re: Premature EOF / Broken Pipe

2009-07-01 Thread Timothy Aanerud
can't say problem solved but this is interesting and confusing at the same time. -- Timothy Aanerud On Mon, Jun 29, 2009 at 9:18 AM, Timothy Aanerud tannerudATaticonsulting.com wrote: I haven't tried switching HTTP connectors. :-( But, I did build a sanitized/stripped down example. Unfortunately

Re: Premature EOF / Broken Pipe

2009-06-29 Thread Timothy Aanerud
to two resources back-to-back before pausing. -- Timothy Aanerud taane...@aticonsulting.com On Mon, Jun 29, 2009 at 2:57 AM, Jerome Louvel jerome.lou...@noelios.comwrote: Hi Timothy, Were you able to make progress on this front? Best regards, Jerome Louvel -- Restlet ~ Founder

Premature EOF / Broken Pipe

2009-06-19 Thread Timothy Aanerud
Hi, I'm having a communications problem between a client/server application both using Restlet 1.1.1 (and since upgraded to 1.1.5). The client and server are both running on Fedora 10, OpenJDK-6 build 14. The client posts a status resource message to the server to exchange status information

RE: Premature EOF / Broken Pipe

2009-06-19 Thread Timothy Aanerud
As a test, I moved the client code to a Windows XP machine. With a five second update rate it fails regularly too, with the same exceptions and stack traces. -- http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447dsMessageId=2363562