FWD » Core Development » Runtime Infrastructure

11/11/2017

12:02 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

> I think that P2J web server should also use these certificates if they are present in the directory under some nod... Greg Shah

11:53 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg Shah wrote:
> Will ACME certs work for all the use cases that we expect?
>
> * FWD Server secure socket for ... Sergey Ivanovskiy

11:40 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Committed revision 11205 fixed my erroneous change 11204. Greg, Constantin, please help to design the architecture of... Sergey Ivanovskiy

11:26 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Greg/Sergey, I think we need to specify in @webClient@ dir... Greg Shah

11:23 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Greg Shah wrote:
> > Do the current changes cause a problem with generating and processi... Greg Shah

11:21 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Greg/Sergey, I think we need to specify in @webClient@ directory.cml a certificate alias... Sergey Ivanovskiy

11:20 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Please review committed rev 11204 that removed ACME certificate usages as CA root certificates since these certificat... Sergey Ivanovskiy

11:19 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg/Sergey, I think we need to specify in @webClient@ directory.cml a certificate alias to be used by all the web cl... Constantin Asofiei

11:18 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

>The ACME certificates can't be used to sign another certificates. That is the reason. The code in 3366a consider the... Greg Shah

11:03 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg Shah wrote:
> Do the current changes cause a problem with generating and processing the self signed certificate... Sergey Ivanovskiy

10:55 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg Shah wrote:
> Sergey Ivanovskiy wrote:
> > Another idea is to use Let's Encrypt certificates only for web clie... Sergey Ivanovskiy

10:52 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg Shah wrote:
> Sergey Ivanovskiy wrote:
> > Greg, Constantin, please share your thoughts because from Let's Enc... Sergey Ivanovskiy

10:12 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Do the current changes cause a problem with generating and processing the self signed certificates? Is there any rea... Greg Shah

10:07 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Another idea is to use Let's Encrypt certificates only for web clients and embedded web s... Greg Shah

10:05 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Greg, Constantin, please share your thoughts because from Let's Encrypt we can get only l... Greg Shah

03:10 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Another idea is to use Let's Encrypt certificates only for web clients and embedded web server. Others services shoul... Sergey Ivanovskiy

02:50 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg, Constantin, please share your thoughts because from Let's Encrypt we can get only leaf server certificates (htt... Sergey Ivanovskiy

02:39 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

For an example, the intermediate Let' Encrypt Authority X3 has these key usages... Sergey Ivanovskiy

02:15 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin, do you know the answer on this question that I don't understand. We got domain.crt (signed by Let's Encry... Sergey Ivanovskiy

11/10/2017

05:51 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Ah, for Let's Encrypt certificates these keys are given from Let's Encrypt. Now they give the chain with only one int... Sergey Ivanovskiy

05:45 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Now, certificate chain should be stored in the directory w... Sergey Ivanovskiy

05:28 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Now, certificate chain should be stored in the directory with root CA certificate. If a r... Constantin Asofiei

04:39 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin, please review the committed rev 11203. The certificate chain was lost because the used chain was built fr... Sergey Ivanovskiy

03:26 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

It seems that I need to save certificates chain in the directory for the case when reuse CA certificates is true. Wha... Sergey Ivanovskiy

12:50 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Code Review Task Branch 3366a Revision 11202
I'm fine with the changes.
We don't need full regression testing, ... Greg Shah

12:47 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

3366a rev 11202 fixed a bug in ConnectionManager related to -ct which was not stopping if first attempt was successful. Constantin Asofiei

11:59 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Committed revision 11201 fixed the case if the current certificate request is still valid and the web server hasn't b... Sergey Ivanovskiy

11:26 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Greg Shah wrote:
> > Can this branch be merged into the trunc? What cases should be tested?
>
> I will review the... Constantin Asofiei

10:15 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

> Can this branch be merged into the trunc? What cases should be tested?
I will review the code.
I previously s... Greg Shah

10:10 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> In my environment I usually use Firefox. With the old code Hotel GUI embedded mode I didn... Greg Shah

09:40 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Committed rev 152 (Hotel GUI) applied this diff... Sergey Ivanovskiy

08:42 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

It seems that the bug issue was fixed. I am rechecking it now. Can this branch be merged into the trunc? What cases s... Sergey Ivanovskiy

08:12 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

In my environment I usually use Firefox. With the old code Hotel GUI embedded mode I didn't notice this issue. A year... Sergey Ivanovskiy

05:22 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > On the other hand, did you had a chance to take a look at ... Constantin Asofiei

12:53 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> On the other hand, did you had a chance to take a look at my @p2j.font.js@ change? My e... Sergey Ivanovskiy

11/09/2017

06:20 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Constantin, what do you think that #3366-29 and #3366-30 should be done or not in order t... Constantin Asofiei

05:31 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

3366a is rebased, rev 11200 is over 11197 trunc. Constantin, what do you think that #3366-29 and #3366-30 should be d... Sergey Ivanovskiy

05:22 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Planning to rebase 3366a, then it will be ready for trunc. Sergey Ivanovskiy

04:33 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Tested rev 11197 and rev 11198 (certs fix) it seems that the issue was fixed. Sergey Ivanovskiy

02:29 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey, I've added some fixes (including the DIALOG-BOX chaining) to 3366a rev 11197.
Please review them and check... Constantin Asofiei

01:59 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Please explain another question. The @main-window.p@ is converted into @MainWindow.java@ ... Constantin Asofiei

01:58 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> OK, found it... it's a stupid bug, the window is actually a @DIALOG-BOX@. But, during c... Sergey Ivanovskiy

01:53 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

OK, found it... it's a stupid bug, the window is actually a @DIALOG-BOX@. But, during creation, its @TYPE@ is report... Constantin Asofiei

01:48 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> OK, I've managed to duplicate it somehow, after some more random clicks... will let you ... Sergey Ivanovskiy

01:46 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

OK, I've managed to duplicate it somehow, after some more random clicks... will let you know what I found.
Constantin Asofiei

01:44 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > The bug scenario can be reproduced if repeat this sequence... Sergey Ivanovskiy

01:39 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> The bug scenario can be reproduced if repeat this sequence rapidly.
> 2) Then open anoth... Constantin Asofiei

01:36 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Sergey, please provide a step-by-step recreate for the #3366-12 issue, a final screensho... Sergey Ivanovskiy

01:33 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey, please provide a step-by-step recreate for the #3366-12 issue, a final screenshot of the web client, the serv... Constantin Asofiei

10:30 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

I just realize that we probably have an issue in this @WindowWidget.firstChild()@... Sergey Ivanovskiy

08:02 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > @LogicalTerminal.displayError@ can notify the embedded cli... Sergey Ivanovskiy

11/08/2017

04:09 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> @LogicalTerminal.displayError@ can notify the embedded client about exceptions thrown in ... Constantin Asofiei

04:06 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

@LogicalTerminal.displayError@ can notify the embedded client about exceptions thrown in @FwdEmbeddedDriver@ that the... Sergey Ivanovskiy

03:57 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

It looks that if an exception is thrown in @FwdEmbeddedDriver.inMsgFwdShowWindow@, then the embedded client and the w... Sergey Ivanovskiy

01:46 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> This write trigger @staywtrg.p@ is also executed if we press "Cancel" on the "Check-in" d... Eric Faulhaber

01:33 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> This write trigger @staywtrg.p@ is also executed if we press "Cancel" on the "Check-in" d... Constantin Asofiei

01:30 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

This write trigger @staywtrg.p@ is also executed if we press "Cancel" on the "Check-in" dialog. From these diagrams i... Sergey Ivanovskiy

01:05 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

W.r.t. to how write triggers are used specifically in the Hotel GUI demo application, they are fired when a new recor... Eric Faulhaber

12:59 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Eric: when is a WRITE table-trigger executed? When the full transaction is committed or ... Eric Faulhaber

12:36 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > The handle in #3366-12 is a static frame of @gdialog##com.... Sergey Ivanovskiy

12:28 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Is it correct that on cancel Check-in dialog the write event is triggered ?
I'm not sure... Constantin Asofiei

12:13 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

The issue in #3366-20 looks like a new bug. Please help to investigate it separately. Sergey Ivanovskiy

11:07 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Please explain when this procedure must be invoked
> [...]
> Now we can observe that 'r... Sergey Ivanovskiy

10:48 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> The handle in #3366-12 is a static frame of @gdialog##com.goldencode.hotel.ui.UpdateStayD... Constantin Asofiei

10:42 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

The handle in #3366-12 is a static frame of @gdialog##com.goldencode.hotel.ui.UpdateStayDialogGdialog$UpdateStayDialo... Sergey Ivanovskiy

10:30 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Please explain when this procedure must be invoked... Sergey Ivanovskiy

11:46 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

> Why would you need this port redirection on the machine? Just not to expose 443 to the internet?
There are multi... Greg Shah

11:46 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Because 443 port is a privilege and this tool can be executed without sudo rights. 443 must be open to the Internet. ... Sergey Ivanovskiy

11:39 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Yes, it is the host and port on the machine on which this tool is executed and its host I... Constantin Asofiei

11:33 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Yes, it is the host and port on the machine on which this tool is executed and its host IP should be accessible at th... Sergey Ivanovskiy

11:27 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Can you explain how @-host@ and @-port@ work? Should these be accessible via the internet? Are they the host/port ... Constantin Asofiei

11:25 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

It is possible to use another host for which there is a registered domain name that is accessible by some external IP... Sergey Ivanovskiy

11:06 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey, please let me know what value should I use to test Let's Encrypt, for these options. Is it possible to do th... Constantin Asofiei

11/07/2017

01:26 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Sergey Ivanovskiy wrote:
> > > I don't understand if it i... Constantin Asofiei

01:23 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > I don't understand if it is possible that some handle in t... Sergey Ivanovskiy

11:53 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> I don't understand if it is possible that some handle in that iteration can be invalid. W... Constantin Asofiei

11:31 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

I don't understand if it is possible that some handle in that iteration can be invalid. Why we don't use @VALID-HANDL... Sergey Ivanovskiy

11:14 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

I lost that the original exception was thrown in the @fwd-embedded-driver.p@ on show embedded window @inMsg_fwdShowWi... Sergey Ivanovskiy

08:27 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

The work was done in #3209. Greg Shah

07:53 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Constantin, could you help to link this task to the task where the embedded architecture was developed: added new FWD... Sergey Ivanovskiy

11/06/2017

04:11 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

It seems that this exception is due to this scenario. If Checkin dialog of the Available rooms embedded window has be... Sergey Ivanovskiy

01:34 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

It seems that this issue is closely related to the embedded JS client because before this loading message appeared co... Sergey Ivanovskiy

01:01 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

OK. Except this last error... Sergey Ivanovskiy

12:58 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Please debug the server and see what is the message when the client blocks. I assume server.log has no info which ca... Constantin Asofiei

12:57 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

No. There is no any Error dialog and Loading.. message is displayed only. The web client main thread is at this point... Sergey Ivanovskiy

12:52 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy wrote:
> In this case the server @Conversation@ thread is blocked.
> [...]
There is a @displayEr... Constantin Asofiei

12:51 PM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

In this case the server @Conversation@ thread is blocked.... Sergey Ivanovskiy

08:27 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

Working on this issue within the new task branch 3366a. Sergey Ivanovskiy

08:22 AM Bug #3366: The JS client for Hotel GUI embedded application becomes unresponsive

After switching between embedded windows with opening modal dialogs the JS Embedded application client can fall in th... Sergey Ivanovskiy

08:16 AM Bug #3366 (New): The JS client for Hotel GUI embedded application becomes unresponsive

Sergey Ivanovskiy

11:18 AM Feature #3240 (Closed): setup and use of real SSL certificates (NOT self-signed)

Greg Shah

11:12 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240b was merged into the trunc as rev 11196 and archived. Sergey Ivanovskiy

10:12 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Code Review Task Branch 3420b Revision 11204
I'm fine with the changes.
Since the changes are just for utility ... Greg Shah

10:08 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Greg, I'm OK with the changes in 3240b rev 11204. Constantin Asofiei

11/05/2017

11:02 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Yes, it seems that these options can be set to these default values:... Sergey Ivanovskiy

11/04/2017

10:48 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Code Review Task Branch 3420b Revision 11200
Generally, I'm OK with the changes. I've checked in some minor forma... Greg Shah

11/03/2017

05:13 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Greg, please review these changes rev 11199. New option to request Let's Encrypt certificates and to rebuild all dire... Sergey Ivanovskiy

12:11 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I forgot to add these new options to com.goldencode.p2j.security.SSLCertGenUtil in order to use one tool... Sergey Ivanovskiy

12:00 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

What is left to do in this task? Greg Shah

11:59 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Code Review Task Branch 3240b Revision 11197
I'm OK with the changes. Greg Shah

11:40 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I encountered some kind of content conflicts due to the previous merge (forgot @bzr bind@ after @bzr rebase@). But th... Sergey Ivanovskiy

11/02/2017

11:08 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Renew is the same process, it requires to run this utility again. Planning to fix issues from #3240-65, and to do it ... Sergey Ivanovskiy

10:50 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

> There are unimplemented use cases related to renew the outdated certificate, revocation of this certificate, and AC... Greg Shah

10:48 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Code Review Task Branch 3240b Revision 11196
The changes are OK.
1. @build.gradle@ and @SSLCertGenUtil@ need hi... Greg Shah

11/01/2017

04:07 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Tested new Let's Encrypt certificates to be fed into @com.goldencode.p2j.security.SSLCertGenUtil@ with these options
... Sergey Ivanovskiy

12:57 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Yes, I meant that this option @-server "acme://letsencrypt.org/"@ must point to the Let's Encrypt production certific... Sergey Ivanovskiy

12:45 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

> this program works correctly with production server
Do you mean the Let's Encrypt production certificate server... Greg Shah

12:40 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

A report of some results from testing the ACME Java code on a demo.goldencode.com:
On 11/01/2017 12:19 PM, Serg Iv... Greg Shah

10/31/2017

11:41 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Committed revision 11194 added acme client as a standalone tool yet. It can be used as this one on devsrv01 with 3240... Sergey Ivanovskiy

11:01 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240a was committed into the trunc rev 11193 and archived. New task branch 3240b was created. Sergey Ivanovskiy

10:29 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Committed revision 11208 added history, planning to merge into trunc. Sergey Ivanovskiy

10:20 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Greg Shah wrote:
> Constantin: What is your opinion of the changes?
The changes look OK to me.
Sergey: add a his... Constantin Asofiei

10:20 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I can confirm that only @args4j-2.33.jar@ is added to the @build/lib@.
Sergey Ivanovskiy

09:59 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> It is safe and has no transitive dependencies that can brake another parts. http://args4j... Constantin Asofiei

09:59 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

It is safe and has no transitive dependencies that can brake another parts. http://args4j.kohsuke.org/dependency-conv... Sergey Ivanovskiy

09:57 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

FYI the args4j is licensed under the MIT license, which is permissive and is allowed for us. Greg Shah

09:57 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin: What is your opinion of the changes? Greg Shah

09:56 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Code Review Task branch 3240a Revision 11207
@build.gradle@ has the @args4j@ change that may need some testing. I... Greg Shah

09:41 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240a was rebased to 11207 from trunc revision 11192. It is ready for review. Sergey Ivanovskiy

09:26 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

OK. Today I found https://letsencrypt.org/2017/10/17/acme-support-in-apache-httpd.html that Apache module automates A... Sergey Ivanovskiy

09:25 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Please rebase to 11192. I'm doing a code review of 3240a right now. Wait to merge until I confirm. Greg Shah

09:23 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Committed revision 11203 of 3240a is ready. Greg, can I merge 3240a after rebasing with trunc 11191 or wait the rev. ... Sergey Ivanovskiy

09:16 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

This diff is moved out. Sergey Ivanovskiy

09:14 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Planning to move this bzr diff -r11197..11202 > 3240b_1.txt into 3240b. Sergey Ivanovskiy

09:09 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Yes, planning to move AcmeClient and ManagedWebServer into 3240b and their dependencies. Sergey Ivanovskiy

09:07 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

My thinking is that the acme4j stuff should be looked at more carefully, but the other utility changes are safer. Greg Shah

09:07 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Acme4j is Apache 2.0 which is fine. Can you split off the acme4j changes into a separate branch and just make this b... Greg Shah

09:06 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

It looks safe. Planning to rebase over the current trunc. Now the rev. is 11202. Sergey Ivanovskiy

09:05 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I added Acme4J dependencies and it used this version '1.56' of Bouncy Castle transitively, but the current version i... Sergey Ivanovskiy

08:42 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Is there a safe version of this branch that can be merged to trunk? What testing is needed? It is OK to finish the ... Greg Shah

10/30/2017

05:37 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Using (calling) a package from a library should not require a different copyright notice in our code.
Do not copy ... Greg Shah

05:36 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Greg, this new functionality to get Let's Encrypt signed certificates is not ready yet. I... Greg Shah

05:30 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Is it required to add this license note at the header... Sergey Ivanovskiy

05:13 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Greg, this new functionality to get Let's Encrypt signed certificates is not ready yet. It takes more time than I exp... Sergey Ivanovskiy

02:56 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Planning to utilize @SecureWebServer@ and @SSLCertFactory@ in order to start the target managed web server to prove t... Sergey Ivanovskiy

10:28 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Committed rev. 11193 fixed these issues and tested certificates regeneration with different settings using a common m... Sergey Ivanovskiy

08:33 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Review for branch 3240a revision 11192:
# please add history entries
# @SSLCertFactory@ is having a dependency on B... Constantin Asofiei

10/29/2017

05:36 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Committed rev. 11191 simplified -L option to load external CA certificates.... Sergey Ivanovskiy

01:11 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Please review the committed revision 11190 that added new option @--build-alias-certs broker1@ to rebuild certs for ... Sergey Ivanovskiy

04:19 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240a was rebased rev. 11189. Sergey Ivanovskiy

10/27/2017

07:03 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

According to https://shredzone.org/maven/acme4j/challenge/tls-sni-01.html acme4j client with a tunable web server can... Sergey Ivanovskiy

10/26/2017

03:54 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Segey, do you need help with any of this stuff?
The current state is that the external ... Sergey Ivanovskiy

03:43 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Segey, do you need help with any of this stuff? Constantin Asofiei

12:50 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Some utilities which will improve the cert generation and ... Constantin Asofiei

11:42 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Some utilities which will improve the cert generation and management:
> # import/export... Sergey Ivanovskiy

10/25/2017

06:26 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240a is rebased over 11182. The current rev is 11187. Sergey Ivanovskiy