Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-31 Thread Andrew Grimberg
On 03/28/2017 08:48 AM, Andrew Grimberg wrote: > > To add to this, while we _can_ switch back to the COMODO cert for Nexus > it's only good until the middle of December and we will _not_ be > purchasing new certs now that we have Let's Encrypt capabilities > configured in our Puppet management. >

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-30 Thread Ryan Goulding
t; --Colin >> >> >> >> >> >> On Mon, Mar 20, 2017 at 8:05 AM, Vishal Thapar < >> vishal.tha...@ericsson.com> wrote: >> >> Thank you Ivan, this worked for me. >> >> >> >> *From:* Ivan Hraško [mailto:ivan.hra...@pantheon.

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-30 Thread Colin Dixon
ra...@pantheon.tech] >> *Sent:* 20 March 2017 15:44 >> *To:* Vishal Thapar <vishal.tha...@ericsson.com>; Anil Belur < >> abe...@linuxfoundation.org> >> *Cc:* t...@lists.opendaylight.org; OpenDaylight Discuss < >> discuss@lists.opendaylight.org>; rele...@lists.o

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-30 Thread Ed Warnicke
par <vishal.tha...@ericsson.com> > *Odoslané:* 20. marca 2017 11:04 > *Komu:* Anil Belur > *Kópia:* t...@lists.opendaylight.org; OpenDaylight Discuss; > rele...@lists.opendaylight.org; OpenDaylight Infrastructure > *Predmet:* Re: [release] [OpenDaylight Discuss] Certificate changes >

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-30 Thread Ed Warnicke
Initial impressions *matter*. For example, my local Mac updater reports I am on Java 8_121... and yet for reasons I have yet to get around to debugging, my maven is using Java 8 77. I'm someone who can figure that out without a lot of difficulty. I can tell you from tons of experience

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-30 Thread Vishal Thapar
imb...@linuxfoundation.org>>; OpenDaylight Discuss <discuss@lists.opendaylight.org<mailto:discuss@lists.opendaylight.org>>; OpenDaylight Infrastructure <infrastruct...@lists.opendaylight.org<mailto:infrastruct...@lists.opendaylight.org>>; rele...@lists.opendaylight.org<ma

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-30 Thread Colin Dixon
ertificate changes >> >> >> >> Hi >> >> >> >> you can try: >> >> >> >> mvn clean install -Djavax.net.ssl.trustStore=$JAVA_HOME >> /jre/lib/security/cacerts >> >> >> >> maybe it helps >&

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-28 Thread Andrew Grimberg
On 03/28/2017 08:37 AM, Thanh Ha wrote: > On Mon, Mar 27, 2017 at 11:32 PM, Ed Warnicke > wrote: > > Anil, > > Thats nice... but at the end of the day, here's the net-net... a > large subset of the world's first experience trying to do

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-28 Thread Thanh Ha
On Mon, Mar 27, 2017 at 11:32 PM, Ed Warnicke wrote: > Anil, > > Thats nice... but at the end of the day, here's the net-net... a large > subset of the world's first experience trying to do ODL development is > going to be that we are inexplicably broken in a cryptic way. I

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-27 Thread Anil Belur
On Tue, Mar 28, 2017 at 1:32 PM, Ed Warnicke wrote: > Anil, > > Thats nice... but at the end of the day, here's the net-net... a large > subset of the world's first experience trying to do ODL development is > going to be that we are inexplicably broken in a cryptic way. I

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-27 Thread Ed Warnicke
Anil, Thats nice... but at the end of the day, here's the net-net... a large subset of the world's first experience trying to do ODL development is going to be that we are inexplicably broken in a cryptic way. I strongly recommend we get a cert that is supported by *any* Oracle JDK 1.8, and wait

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-27 Thread Anil Belur
On Tuesday 28 March 2017 10:29 AM, Ed Warnicke wrote: > Anil, > > The issue is that we are using a LetsEncrypt cert for nexus.opendaylight.org, > and that's not a cert that is trusted by the OracleJDK. > We need a cert from one of the trusted CA listed below: > > keytool -list -v -keystore >

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-27 Thread Ed Warnicke
Anil, The issue is that we are using a LetsEncrypt cert for nexus.opendaylight.org, and that's not a cert that is trusted by the OracleJDK. We need a cert from one of the trusted CA listed below: keytool -list -v -keystore

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-27 Thread Ed Warnicke
Anil, Has anyone checked to see if the cert we are using is repected by the Oracle JDK? Because I can trivially reproduce this issue with the Oracle JDK that comes as stock on the Mac (where many of our developers work). The SSL rating you mentioned is basically meaningless for this problem...

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-27 Thread Anil Belur
On Thursday 16 March 2017 03:01 AM, Andrew Grimberg wrote: > On 03/13/2017 04:56 PM, Andrew Grimberg wrote: >> On 03/13/2017 03:15 PM, Andrew Grimberg wrote: >>> Greetings folks, >>> >>> Google release Chrome 57 last week and if you happen to have updated you >>> may find you can't access

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-24 Thread Mohamed ElSerngawy
frastructure > *Predmet:* Re: [release] [OpenDaylight Discuss] Certificate changes > > > > Hi Anil, > > > > I got the certificate downloaded and checked my cert store to confirm > also, but still getting the same error. > > > > Regards, > > Vishal. >

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-24 Thread Daniel Malachovsky -X (dmalacho - PANTHEON TECHNOLOGIES at Cisco)
OpenDaylight Infrastructure <infrastruct...@lists.opendaylight.org<mailto:infrastruct...@lists.opendaylight.org>>; rele...@lists.opendaylight.org<mailto:rele...@lists.opendaylight.org>; t...@lists.opendaylight.org<mailto:t...@lists.opendaylight.org> Subject: Re: [OpenDayligh

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-23 Thread Vishal Thapar
mailto:agrimb...@linuxfoundation.org>>; OpenDaylight Discuss <discuss@lists.opendaylight.org<mailto:discuss@lists.opendaylight.org>>; OpenDaylight Infrastructure <infrastruct...@lists.opendaylight.org<mailto:infrastruct...@lists.opendaylight.org>>; rele...@lists.opendaylight.org<ma

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-23 Thread Ed Warnicke
t;> >> I got the certificate downloaded and checked my cert store to confirm >> also, but still getting the same error. >> >> >> >> Regards, >> >> Vishal. >> >> >> >> *From:* Anil Belur [mailto:abe...@linuxfoundation.org >> <

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-23 Thread Colin Dixon
csson.com> > *Cc:* Andrew Grimberg <agrimb...@linuxfoundation.org>; OpenDaylight > Discuss <discuss@lists.opendaylight.org>; OpenDaylight Infrastructure < > infrastruct...@lists.opendaylight.org>; rele...@lists.opendaylight.org; > t...@lists.opendaylight.org > *Subje

Re: [OpenDaylight Discuss] [release] Certificate changes

2017-03-21 Thread Ivan Hraško
sts.opendaylight.org>; rele...@lists.opendaylight.org; t...@lists.opendaylight.org Subject: Re: [OpenDaylight Discuss] [release] Certificate changes On Mon, Mar 20, 2017 at 5:41 PM, Vishal Thapar <vishal.tha...@ericsson.com<mailto:vishal.tha...@ericsson.com>> wrote: Hi Andrew, I am facing cert