Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: softfail (nike.apache.org: transitioning domain of
 mail@sanderdijkhuis.nl does not designate 66.111.4.27 as permitted sender)
From: Sander Dijkhuis <mail@sanderdijkhuis.nl>
Content-Type: multipart/alternative;
 boundary="Apple-Mail=_9B331310-D6A1-40EC-BFDE-18AF62D0092E"
Message-Id: <3E45B2BF-6D7F-462C-93E3-2A3932A07108@sanderdijkhuis.nl>
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
Subject: Re: Apache couchDB CA signed certificate issues
Date: Wed, 12 Jun 2013 16:28:23 +0200
References: <018674D2811A114F8220F3FAA87F2B700A7DA693@UKSRV022.7city.local>
 <CABvT1DEZ0Cudcy+UhZPHRzCftK-k1-jZOo2OVDhm0gx7cpKzqQ@mail.gmail.com>
 <CABvT1DFUGanPCKX2NBcQbrQk12fp4U9LLr1FEC5jZii61u-V9w@mail.gmail.com>
 <CACLy94WXxTQ1T9jjA8DxZ2+pwGUjKxa23Zv2DZWmWMJa2f99fA@mail.gmail.com>
To: user@couchdb.apache.org
In-Reply-To: 
 <CACLy94WXxTQ1T9jjA8DxZ2+pwGUjKxa23Zv2DZWmWMJa2f99fA@mail.gmail.com>

--Apple-Mail=_9B331310-D6A1-40EC-BFDE-18AF62D0092E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

What kind of problems should I expect with native SSL? I=92ve just set =
up CouchDB with a self-signed certificate, and that seems to work fine =
for my purposes.

If it=92s advised against, maybe this manual page should mention that:
http://docs.couchdb.org/en/latest/configuring.html#native-ssl-support

On Jun 12, 2013, at 16:14 , Jason Smith <jhs@apache.org> wrote:

> That was the single most problematic CouchDB commit I have ever had to =
deal
> with. (Bob's work was fine; but it forced an introduction I regretted
> having.)
>=20
>=20
> On Wed, Jun 12, 2013 at 9:03 PM, Robert Newson <rnewson@apache.org> =
wrote:
>=20
>> and by "never", I strictly mean "for a very brief period where I =
added
>> native SSL support to CouchDB in 2010".
>>=20
>> B.
>>=20
>>=20
>> On 12 June 2013 15:01, Robert Newson <rnewson@apache.org> wrote:
>>> I'd recommend haproxy 1.5 anyway, I've never been a big fan of
>>> erlang's built-in SSL support (and it has a fairly yucky history of
>>> bugs).
>>>=20
>>> B.

--Apple-Mail=_9B331310-D6A1-40EC-BFDE-18AF62D0092E--