svn commit: r1407254 - /openejb/site/trunk/content/ejb-over-ssl.mdtext

[jl...@apache.org]

Author: jlmonteiro
Date: Thu Nov  8 20:15:44 2012
New Revision: 1407254

URL: http://svn.apache.org/viewvc?rev=1407254&view=rev
Log:
Applying a parch from a contributor. Thanks

Modified:
    openejb/site/trunk/content/ejb-over-ssl.mdtext

Modified: openejb/site/trunk/content/ejb-over-ssl.mdtext
URL: http://svn.apache.org/viewvc/openejb/site/trunk/content/ejb-over-ssl.mdtext?rev=1407254&r1=1407253&r2=1407254&view=diff
==============================================================================
--- openejb/site/trunk/content/ejb-over-ssl.mdtext (original)
+++ openejb/site/trunk/content/ejb-over-ssl.mdtext Thu Nov  8 20:15:44 2012
@@ -19,7 +19,7 @@ Once that is done and the `tomee` webapp
 
     Properties p = new Properties();
     p.put("java.naming.factory.initial", "org.apache.openejb.client.RemoteInitialContextFactory");
-    p.put("java.naming.provider.url", "http://127.0.0.1:8080/tomee/ejb");
+    p.put("java.naming.provider.url", "https://127.0.0.1:8443/tomee/ejb");
     // user and pass optional
     p.put("java.naming.security.principal", "myuser");
     p.put("java.naming.security.credentials", "mypass");
@@ -28,6 +28,14 @@ Once that is done and the `tomee` webapp
 
     MyBean myBean = (MyBean) ctx.lookup("MyBeanRemote");
 
+If you setup Tomcat (TomEE) to use the APR (Apache Portable Runitme) implementation of SSL on the server side, and you have connection issues like connection reset, you'll have to set 'https.protocols' system property.
+'https.protocols' property must be set according to the SSLProtocol parameter of the HTTPS connector configuration :
+
+[http://tomcat.apache.org/tomcat-7.0-doc/config/http.html][1]
+
+You can also have a look a this : 
+
+[http://docs.oracle.com/javase/1.4.2/docs/guide/plugin/developer_guide/faq/troubleshooting.html][2]
 
 # ejbds
 
@@ -81,4 +89,8 @@ On the client, you must supply a propert
 
     -Dopenejb.client.enabledCipherSuites=TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA
 
-The final piece is to make sure your server has available a private certificate that the the client can trust. This can be certificate from an authority or a self signed certificate. The javax.net.ssl.trustStore and javax.net.ssl.keyStore JVM properties [are used to set this up.](http://fusesource.com/docs/broker/5.3/security/SSL-SysProps.html)
\ No newline at end of file
+The final piece is to make sure your server has available a private certificate that the the client can trust. This can be certificate from an authority or a self signed certificate. The javax.net.ssl.trustStore and javax.net.ssl.keyStore JVM properties [are used to set this up.](http://fusesource.com/docs/broker/5.3/security/SSL-SysProps.html)
+
+
+  [1]: http://tomcat.apache.org/tomcat-7.0-doc/config/http.html
+  [2]: http://docs.oracle.com/javase/1.4.2/docs/guide/plugin/developer_guide/faq/troubleshooting.html
\ No newline at end of file