db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rick Hillegas (JIRA)" <j...@apache.org>
Subject [jira] Closed: (DERBY-2795) Unable to bring up server with SSL peer authentication enabled
Date Tue, 19 Jun 2007 19:55:26 GMT

     [ https://issues.apache.org/jira/browse/DERBY-2795?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Rick Hillegas closed DERBY-2795.
--------------------------------


> Unable to bring up server with SSL peer authentication enabled
> --------------------------------------------------------------
>
>                 Key: DERBY-2795
>                 URL: https://issues.apache.org/jira/browse/DERBY-2795
>             Project: Derby
>          Issue Type: Bug
>    Affects Versions: 10.3.0.0
>            Reporter: Rick Hillegas
>            Assignee: Bernt M. Johnsen
>             Fix For: 10.3.0.0
>
>         Attachments: DERBY-2795-code-bug.diff, DERBY-2795-code-bug.stat, DERBY-2795-doc-bug.diff
>
>
> I was able to bring up the server with basic SSL support (-ssl basic). The server came
up and printed this diagnostic:
>   Apache Derby Network Server - 10.3.0.0 alpha - (545529M) started and ready to accept
SSL connections on port 8246 at 2007-06-08 19:11:51.449 GMT
> However, when I brought up the server with SSL peer authentication (-ssl authenticate),
the server came up without printing out an SSL diagnostic. I was able to connect to the server
from a client which did not request ssl on the connection URL. I was able to shutdown the
server without specifying an ssl option on the shutdown command line. Here is the command
I used to bring up the network server with SSL peer authentication:
> java \
>   -Dderby.connection.requireAuthentication=true \
>   -Dderby.authentication.provider=BUILTIN \
>   -Dderby.user.\"rick\"=rickspassword \
>   -Dderby.database.sqlAuthorization=true \
>   -Djavax.net.ssl.keyStore=/export/home/rh161140/derby/keystores/serverKeyStore.key \
>   -Djavax.net.ssl.keyStorePassword=serverKeystorePassword \
>   -Djavax.net.ssl.trustStore=/export/home/rh161140/derby/keystores/serverKeyStore.key
\
>   -Djavax.net.ssl.trustStorePassword=serverKeystorePassword \
>   org.apache.derby.drda.NetworkServerControl start -p 8246 -ssl peerAuthenticate

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message