Activity
From 10/05/2017 to 11/03/2017
11/03/2017
- 05:13 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Greg, please review these changes rev 11199. New option to request Let's Encrypt certificates and to rebuild all dire...
- 12:11 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- I forgot to add these new options to com.goldencode.p2j.security.SSLCertGenUtil in order to use one tool...
- 12:00 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- What is left to do in this task?
- 11:59 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Code Review Task Branch 3240b Revision 11197
I'm OK with the changes. - 11:40 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- I encountered some kind of content conflicts due to the previous merge (forgot @bzr bind@ after @bzr rebase@). But th...
11/02/2017
- 11:08 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Renew is the same process, it requires to run this utility again. Planning to fix issues from #3240-65, and to do it ...
- 10:50 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- > There are unimplemented use cases related to renew the outdated certificate, revocation of this certificate, and AC...
- 10:48 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Code Review Task Branch 3240b Revision 11196
The changes are OK.
1. @build.gradle@ and @SSLCertGenUtil@ need hi...
11/01/2017
- 04:07 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Tested new Let's Encrypt certificates to be fed into @com.goldencode.p2j.security.SSLCertGenUtil@ with these options
... - 12:57 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Yes, I meant that this option @-server "acme://letsencrypt.org/"@ must point to the Let's Encrypt production certific...
- 12:45 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- > this program works correctly with production server
Do you mean the Let's Encrypt production certificate server... - 12:40 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- A report of some results from testing the ACME Java code on a demo.goldencode.com:
On 11/01/2017 12:19 PM, Serg Iv...
10/31/2017
- 11:41 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Committed revision 11194 added acme client as a standalone tool yet. It can be used as this one on devsrv01 with 3240...
- 11:01 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- 3240a was committed into the trunc rev 11193 and archived. New task branch 3240b was created.
- 10:29 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Committed revision 11208 added history, planning to merge into trunc.
- 10:20 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Greg Shah wrote:
> Constantin: What is your opinion of the changes?
The changes look OK to me.
Sergey: add a his... - 10:20 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- I can confirm that only @args4j-2.33.jar@ is added to the @build/lib@.
- 09:59 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Sergey Ivanovskiy wrote:
> It is safe and has no transitive dependencies that can brake another parts. http://args4j... - 09:59 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- It is safe and has no transitive dependencies that can brake another parts. http://args4j.kohsuke.org/dependency-conv...
- 09:57 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- FYI the args4j is licensed under the MIT license, which is permissive and is allowed for us.
- 09:57 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Constantin: What is your opinion of the changes?
- 09:56 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Code Review Task branch 3240a Revision 11207
@build.gradle@ has the @args4j@ change that may need some testing. I... - 09:41 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- 3240a was rebased to 11207 from trunc revision 11192. It is ready for review.
- 09:26 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- OK. Today I found https://letsencrypt.org/2017/10/17/acme-support-in-apache-httpd.html that Apache module automates A...
- 09:25 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Please rebase to 11192. I'm doing a code review of 3240a right now. Wait to merge until I confirm.
- 09:23 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Committed revision 11203 of 3240a is ready. Greg, can I merge 3240a after rebasing with trunc 11191 or wait the rev. ...
- 09:16 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- This diff is moved out.
- 09:14 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Planning to move this bzr diff -r11197..11202 > 3240b_1.txt into 3240b.
- 09:09 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Yes, planning to move AcmeClient and ManagedWebServer into 3240b and their dependencies.
- 09:07 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- My thinking is that the acme4j stuff should be looked at more carefully, but the other utility changes are safer.
- 09:07 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Acme4j is Apache 2.0 which is fine. Can you split off the acme4j changes into a separate branch and just make this b...
- 09:06 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- It looks safe. Planning to rebase over the current trunc. Now the rev. is 11202.
- 09:05 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- I added Acme4J dependencies and it used this version '1.56' of Bouncy Castle transitively, but the current version i...
- 08:42 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Is there a safe version of this branch that can be merged to trunk? What testing is needed? It is OK to finish the ...
10/30/2017
- 05:37 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Using (calling) a package from a library should not require a different copyright notice in our code.
Do not copy ... - 05:36 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Sergey Ivanovskiy wrote:
> Greg, this new functionality to get Let's Encrypt signed certificates is not ready yet. I... - 05:30 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Is it required to add this license note at the header...
- 05:13 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Greg, this new functionality to get Let's Encrypt signed certificates is not ready yet. It takes more time than I exp...
- 02:56 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Planning to utilize @SecureWebServer@ and @SSLCertFactory@ in order to start the target managed web server to prove t...
- 10:28 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Committed rev. 11193 fixed these issues and tested certificates regeneration with different settings using a common m...
- 08:33 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Review for branch 3240a revision 11192:
# please add history entries
# @SSLCertFactory@ is having a dependency on B...
10/29/2017
- 05:36 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Committed rev. 11191 simplified -L option to load external CA certificates....
- 01:11 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Please review the committed revision 11190 that added new option @--build-alias-certs broker1@ to rebuild certs for ...
- 04:19 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- 3240a was rebased rev. 11189.
10/27/2017
- 07:03 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- According to https://shredzone.org/maven/acme4j/challenge/tls-sni-01.html acme4j client with a tunable web server can...
10/26/2017
- 03:54 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Constantin Asofiei wrote:
> Segey, do you need help with any of this stuff?
The current state is that the external ... - 03:43 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Segey, do you need help with any of this stuff?
- 12:50 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Some utilities which will improve the cert generation and ... - 11:42 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- Constantin Asofiei wrote:
> Some utilities which will improve the cert generation and management:
> # import/export...
10/25/2017
- 06:26 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)
- 3240a is rebased over 11182. The current rev is 11187.
10/06/2017
- 04:58 PM Bug #3345: deadlock in virtual session usage
- #3260-18 found a deadlock which had an attempted fix in 3260a 11166 (which was backed out as it was incorrect).
Th... - 04:56 PM Bug #3345 (Closed): deadlock in virtual session usage
Also available in: Atom