FWD » Core Development » Runtime Infrastructure

11/24/2017

06:35 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240c was merged into the trunc rev. 11203. Sergey Ivanovskiy

06:10 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Please merge 3240c to trunk. Greg Shah

11/23/2017

06:00 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Can I merge 3240c into the trunk?
3240c was rebased over trunc rev. 11202. The current... Sergey Ivanovskiy

11/22/2017

01:18 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Can I merge 3240c into the trunk? Sergey Ivanovskiy

10:56 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I did this constraint in order that this new web alias has a unique name within the directory. If the web alias is fr... Sergey Ivanovskiy

08:24 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey, looks like I'm not allowed to use @embedded@ alias - is it because there is a process using the same certific... Constantin Asofiei

11/21/2017

05:45 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

OK, stopped this testing. Sergey Ivanovskiy

05:19 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

> In this run there are different failed tests except tc_job_002 and tc_job_clock_004
I think this is enough to t... Greg Shah

04:23 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

The last main-regression tests were failed without writing reports. Planning to restart for rev 11208. Sergey Ivanovskiy

03:13 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Found the following unrelated issue that if the directory doesn't have a company configuration, then generated certif... Sergey Ivanovskiy

03:00 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I checked that the main web site @www.goldencode.com@ has these target fields unset too. Sergey Ivanovskiy

02:56 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

@domain.csr@ has all required fields... Sergey Ivanovskiy

02:14 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> No, I don't think that with 3240c there is this bug. Constantin, could I look at @domain.... Constantin Asofiei

01:42 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Checked P2J self-signed certificates and found that they d... Sergey Ivanovskiy

11:41 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Checked P2J self-signed certificates and found that they don't have organization and orga... Constantin Asofiei

11:37 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

May be we should check up these use cases for AcmeClient: revoke certificate, delete account, then register new accou... Sergey Ivanovskiy

11:32 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Sergey, OK, the certificate is generated and is trusted by the browser. Issues:
> 1. a... Sergey Ivanovskiy

10:50 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey, OK, the certificate is generated and is trusted by the browser. Issues:
# although I specified @--web-alias... Constantin Asofiei

10:39 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Planning to run main-regression tests for rev. 11206. Sergey Ivanovskiy

10:34 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Greg Shah wrote:
> Please re-run the main regression testing. You don't have to re-do the CTRL-C tests.
Yes, the n... Sergey Ivanovskiy

10:21 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Sergey, I'm getting this on demosrv01:
> > [...]
> >
>... Sergey Ivanovskiy

10:17 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Sergey, I'm getting this on demosrv01:
> [...]
>
> demosrv01 is configured with 3240... Sergey Ivanovskiy

09:52 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Please re-run the main regression testing. You don't have to re-do the CTRL-C tests. Greg Shah

08:39 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey, I'm getting this on demosrv01:... Constantin Asofiei

04:23 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

The @ctrl-c-regression@ part has been finished with these results 20171120_231820.zip, where @gso_ctrlc_tests@ are pa... Sergey Ivanovskiy

11:35 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

The @main-regression@ part of the run-time tests is ready and available at devsrv01 in the results folder 20171120_16... Sergey Ivanovskiy

11/20/2017

01:11 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

There are no another requirements to run the command except the P2J and embedded application servers should be stopped. Sergey Ivanovskiy

01:04 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

This command should change @directory.xml@ and add downloaded certificates to @directory.xml@ under @/security/certif... Sergey Ivanovskiy

12:47 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey, what directory preparations are there required? I assume all Jetty web servers will be using the same alias ... Constantin Asofiei

11:40 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin, please test this command #3240-80 (#3240-95) with these additional parameters @--web-alias@ and @--server... Sergey Ivanovskiy

11:27 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Constantin, the tool @SSLCertGenUtil@ can build now the web key store that can be used fo... Constantin Asofiei

11:02 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I'm OK with the changes in 3240c rev 11205.
Sergey Ivanovskiy wrote:
> Should this branch 3240c be checked with r... Constantin Asofiei

02:43 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Should this branch 3240c be checked with regression tests on devsrv01? It seems that the changes are related to web s... Sergey Ivanovskiy

11/17/2017

09:40 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin, the tool @SSLCertGenUtil@ can build now the web key store that can be used for the embedded application. ... Sergey Ivanovskiy

06:28 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

3240c was rebased over 11201. Please review 11205 that fixed all issues found in the review #3240-96. Sergey Ivanovskiy

11/16/2017

09:34 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

OK, understand. Planning to do changes accordingly. Sergey Ivanovskiy

09:16 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey Ivanovskiy wrote:
> Please correct me. The @webCertificates@ must be per a server name under @/security/certi... Constantin Asofiei

09:06 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Constantin Asofiei wrote:
> Sergey, this is a review for 3240c rev 11202:
> placing the @webCertificates@ node unde... Sergey Ivanovskiy

08:35 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Sergey, this is a review for 3240c rev 11202:
# placing the @webCertificates@ node under the @server/default@ is not... Constantin Asofiei

07:44 PM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Decided to use separate configuration @webCertificates@ because the trusted chain certificates can be easily retrieve... Sergey Ivanovskiy

11/15/2017

09:16 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I'm OK with your directory changes. I prefer them to be in the certificates branch.
Constantin: Any objections?
... Greg Shah

08:45 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

I changed the web certificate configuration to this one in order to support private and public certificate pairs unde... Sergey Ivanovskiy

11/14/2017

09:12 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

!LetsEncryptCerts.png! Sergey Ivanovskiy

09:05 AM Feature #3240: setup and use of real SSL certificates (NOT self-signed)

Planning to add this new container @webCertificates@ to the directory under @server/default@... Sergey Ivanovskiy