Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Riena » Remote Services + https ?
Remote Services + https ? [message #27095] Sun, 21 June 2009 01:56 Go to next message
Eclipse User
Originally posted by: eclipse-dev.volanakis.de

Hi,

just curious: is it possible to use Riena Remote Services with https out
of the box?

I'm looking for something like this:
https://localhost:8080/hessian/PingPongWS
^

Elias.
Re: Remote Services + https ? [message #27134 is a reply to message #27095] Sun, 21 June 2009 06:50 Go to previous messageGo to next message
Christian Campo is currently offline Christian Campo
Messages: 590
Registered: July 2009
Senior Member
Elias Volanakis schrieb:
> Hi,
>
> just curious: is it possible to use Riena Remote Services with https out
> of the box?
>
> I'm looking for something like this:
> https://localhost:8080/hessian/PingPongWS
> ^
>
> Elias.
Yes you can. You just need to setup your server with HTTPs and use an SSL certificate. There is even in
o.e.r.communication.core a class SSLConfiguration which allows you to configure cacerts for clients. That is a
certifacte server with servers you trust as a client.

I guess Stefan could shed some more light on the SSLConfiguraation thing. I am not sure if also allows client
certificates (that is a client has a certificate that a server has to trust) but client certificates are not that
common. (browsers for example allways only use server certifacats).

But that server certifact use case should work out of the box.

christian
Re: Remote Services + https ? [message #27173 is a reply to message #27134] Wed, 24 June 2009 07:30 Go to previous message
Stefan Liebig is currently offline Stefan Liebig
Messages: 124
Registered: July 2009
Senior Member
Hi Elias,

Currently we only support server certificates.
You can configure your ssl configuration with the
"org.eclipse.riena.communication.core.ssl" extension point.
This may look like this:
<extension
id="org.eclipse.riena.communication.core.ssl.test"
<sslconfig protocol="TLSv1" keystore="#jre-cacerts#"
password="changeit"/>
</extension>

This special value of the key-store attribute means take the certificate
of the running JRE.
The key-store may define the certificate as a file, a resource local to
the contributing bundle or a URL.

HTH,
Stefan

Christian Campo wrote:
> Elias Volanakis schrieb:
>> Hi,
>>
>> just curious: is it possible to use Riena Remote Services with https
>> out of the box?
>>
>> I'm looking for something like this:
>> https://localhost:8080/hessian/PingPongWS
>> ^
>>
>> Elias.
> Yes you can. You just need to setup your server with HTTPs and use an
> SSL certificate. There is even in o.e.r.communication.core a class
> SSLConfiguration which allows you to configure cacerts for clients. That
> is a certifacte server with servers you trust as a client.
>
> I guess Stefan could shed some more light on the SSLConfiguraation
> thing. I am not sure if also allows client certificates (that is a
> client has a certificate that a server has to trust) but client
> certificates are not that common. (browsers for example allways only use
> server certifacats).
>
> But that server certifact use case should work out of the box.
>
> christian
Re: Remote Services + https ? [message #582890 is a reply to message #27095] Sun, 21 June 2009 06:50 Go to previous message
Christian Campo is currently offline Christian Campo
Messages: 590
Registered: July 2009
Senior Member
Elias Volanakis schrieb:
> Hi,
>
> just curious: is it possible to use Riena Remote Services with https out
> of the box?
>
> I'm looking for something like this:
> https://localhost:8080/hessian/PingPongWS
> ^
>
> Elias.
Yes you can. You just need to setup your server with HTTPs and use an SSL certificate. There is even in
o.e.r.communication.core a class SSLConfiguration which allows you to configure cacerts for clients. That is a
certifacte server with servers you trust as a client.

I guess Stefan could shed some more light on the SSLConfiguraation thing. I am not sure if also allows client
certificates (that is a client has a certificate that a server has to trust) but client certificates are not that
common. (browsers for example allways only use server certifacats).

But that server certifact use case should work out of the box.

christian
Re: Remote Services + https ? [message #582901 is a reply to message #27134] Wed, 24 June 2009 07:30 Go to previous message
Stefan Liebig is currently offline Stefan Liebig
Messages: 124
Registered: July 2009
Senior Member
Hi Elias,

Currently we only support server certificates.
You can configure your ssl configuration with the
"org.eclipse.riena.communication.core.ssl" extension point.
This may look like this:
<extension
id="org.eclipse.riena.communication.core.ssl.test"
<sslconfig protocol="TLSv1" keystore="#jre-cacerts#"
password="changeit"/>
</extension>

This special value of the key-store attribute means take the certificate
of the running JRE.
The key-store may define the certificate as a file, a resource local to
the contributing bundle or a URL.

HTH,
Stefan

Christian Campo wrote:
> Elias Volanakis schrieb:
>> Hi,
>>
>> just curious: is it possible to use Riena Remote Services with https
>> out of the box?
>>
>> I'm looking for something like this:
>> https://localhost:8080/hessian/PingPongWS
>> ^
>>
>> Elias.
> Yes you can. You just need to setup your server with HTTPs and use an
> SSL certificate. There is even in o.e.r.communication.core a class
> SSLConfiguration which allows you to configure cacerts for clients. That
> is a certifacte server with servers you trust as a client.
>
> I guess Stefan could shed some more light on the SSLConfiguraation
> thing. I am not sure if also allows client certificates (that is a
> client has a certificate that a server has to trust) but client
> certificates are not that common. (browsers for example allways only use
> server certifacats).
>
> But that server certifact use case should work out of the box.
>
> christian
Previous Topic:Remote Services + https ?
Next Topic:Riena 1.1.0.0 Targetplatform download zip
Goto Forum:
  


Current Time: Sat Jul 26 07:21:48 EDT 2014

Powered by FUDForum. Page generated in 0.01947 seconds