Re: [Resin-interest] Restricting Cipher Suites
On Jan 23, 2008, at 9:29 AM, Jay Ballinger wrote: I'm finding myself in the same boat as Tim, I need to restrict the list of ciphers for resin using JSSE. Tim, did you get this working? I've added this as a bug report at http://bugs.caucho.com/view.php? id=2360 -- Scott + jay Kuntz, Tim wrote: All, I’m currently using JSSE vs. OpenSSL for my SSL configuration. I now need to restrict the ciphers so use of the weaker ciphers are not allowed; for instance, anything 128-bit. The JSSE documentation says that the following system property can be used to set the enabled ciphers, assuming that they are supported. Setting this property seems to have no impact on the ciphers being used by Resin, however. system-property https.cipherSuites=SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA ,SSL_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_W ITH_AES_256_CBC_SHA/ Does anyone have a solution to this problem? Thanks, Tim Resin Pro 3.1.0 Java 1.5.0_06 - --- ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
[Resin-interest] Configuration changes from Resin 3.0.x to 3.1.x
Hello, We recently upgraded to Resin 3.1.4 from 3.0.23 and had a few issues with system properties declared in an imported config file. It seems 3.1.4's doesn't see properties declared with . in the property name anymore, and the EL expression in resin3.xml doesn't interpret properly: system-property http.server.port=8080 / gets interpreted as 0 and system-property dev.database.name=devDB / gets interpreted as an empty string. My workaround was to rename these properties using no periods (e.g. httpServerPort), but I was curious as to why this particular behavior change, and if there's a way to use the 3.0.x syntax in 3.1.x. Also, it'd be nice to see the documentation updated to reflect this change ;-) Thanks, Curtis ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
Re: [Resin-interest] Configuration changes from Resin 3.0.x to 3.1.x
On Jan 23, 2008, at 11:10 AM, Curtis Taylor wrote:
Hello,
We recently upgraded to Resin 3.1.4 from 3.0.23 and had a few issues
with system properties declared in an imported config file. It seems
3.1.4's doesn't see properties declared with . in the property name
anymore, and the EL expression in resin3.xml doesn't interpret
properly:
system-property http.server.port=8080 / gets interpreted as 0
and
system-property dev.database.name=devDB / gets interpreted as an
empty string.
I've just added that as a bug at: http://bugs.caucho.com/view.php?
id=2361
The implementation is a little tricky, because Resin has to try $
{http} to see if it's an existing object before trying $
{http.server.port} as a system property.
-- Scott
My workaround was to rename these properties using no periods (e.g.
httpServerPort), but I was curious as to why this particular
behavior change, and if there's a way to use the 3.0.x syntax in
3.1.x.
Also, it'd be nice to see the documentation updated to reflect this
change ;-)
Thanks,
Curtis
___
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest
___
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest
Re: [Resin-interest] 3.0.25 changes?
On Jan 22, 2008, at 2:44 PM, Shane Cruz wrote: Does issue #2154 also affect cluster/tcp store or just JDBC store? In theory it would affect cluster/tcp store (i.e. the bug isn't in the general persistence, not just jdbc), but always-load-session doesn't have any meaning there. But if you were on server 'C' and the session was owned by 'A' with backup 'B', then you might get a performance hit. -- Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sam Sent: Tuesday, January 15, 2008 8:29 AM To: General Discussion for the Resin application server Subject: Re: [Resin-interest] 3.0.25 changes? What changes are included in resin 3.0.25 since 3.0.24? http://www.caucho.com/resin-3.0/features/changes.xtp jsp: tag-file pageEncoding not properly picked up (#2170) configure.in fix with -lc for linux (#2082) session - always-load-session would load for static pages (#2154) win32: isapi_srun.dll should return 503 on backend disconnect (#2040) win32: isapi_srun.dll config of client-read-time (#2039, #2129) win32: isapi_srun.dll saving of config (#1879) proxy cache: redo cache loading for sync issues (#1992) hessian: issue with class serialization (#198) windows issues with webapps and trailing dot request.getInputStream issues with encodings (#1915) -- Sam ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
[Resin-interest] Visual JSF and Resin Snapshot
I am trying the latest Resin with Visual JSF from Netbeans. And while the older error messages gone: /META-INF/faces-config.xml:57: com.caucho.jsf.cfg.ApplicationConfig.setPropertyResolver(): Custom bean class `com.sun.rave.faces.data.ResultSetPropertyResolver' doesn't have a zero-arg constructor. Bean classes must be have a zero-argument constructor. 55: -- 56: !-- Custom PropertyResolver for ResultSet and RowSet Objects -- 57: property-resolver 58: com.sun.rave.faces.data.ResultSetPropertyResolver 59: /property-resolver Any ideas? Regards, Andreas Fischer___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
Re: [Resin-interest] Visual JSF and Resin Snapshot
Andreas, Thanks for reporting this, I have filed it as a bug http://bugs.caucho.com/view.php?id=2364 . Regards, Alex Rojkov Software Engineer Caucho Technology, Inc. Tel. (858) 456-0300 mailto:[EMAIL PROTECTED] Caucho: Reliable Open Source -- Resin: application server -- Quercus: PHP in Java -- Hessian Web Services ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
Re: [Resin-interest] Visual JSF and Resin Snapshot
Andreas, Thanks for reporting this, I have filed it as a bug http://bugs.caucho.com/view.php?id=2364 . Regards, Alex Rojkov Software Engineer Caucho Technology, Inc. Tel. (858) 456-0300 mailto:[EMAIL PROTECTED] Caucho: Reliable Open Source -- Resin: application server -- Quercus: PHP in Java -- Hessian Web Services ___ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
