Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-7694

Provide JDK SSLContext/Netty OpenSSLContext bridge and allow using OpenSSL

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Duplicate
    • Critical
    • None
    • None
    • None
    • None

    Description

      In order to use OpenSSL with Netty (which is much faster than JDK implementation), and stick with WildFly SSL initialization, we need to provide a bridge from JDK SSLContext into OpenSSLContext.

      The next step is to use this bridge here: https://github.com/infinispan/infinispan/blob/fd3061a684c13aa7c22d215f43910735bf7ff4a6/server/router/src/main/java/org/infinispan/server/router/router/impl/hotrod/handlers/util/SslUtils.java#L35

      Finally, we need to put netty-tcnative into the server's classpath.

      More information: http://netty.io/wiki/requirements-for-4.x.html#tls-with-openssl

      Attachments

        Issue Links

          Activity

            People

              ttarrant@redhat.com Tristan Tarrant
              slaskawi@redhat.com Sebastian Ɓaskawiec (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: