You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by Steve Huston <sh...@riverace.com> on 2010/01/08 01:13:29 UTC
Request for review/discussion of proposed SSL additions for C++ broker/client on Windows
I have just attached a new patch to QPID-1403
(https://issues.apache.org/jira/browse/QPID-1403) with additions for SSL
support on Windows for the C++ broker and client. I would like to have a
review of this before committing it to the repository.
Andrew Stitcher has had a cursory look at an earlier version of the
patch and suggested that he would like to have a more in-depth look and
discussion post-0.6. We're looking at next week for this review. He
suggested that Gordon Sim, as author of the Linux SSL support, may have
particular insights to share as well. All other interested people are
welcome and encouraged to join in.
For some background info on Windows Schannel (the native SSL
implementation on Windows) I wrote a blog overview of it recently - you
may want to read that before the review meeting for this patch
(http://stevehuston.wordpress.com/2009/12/29/how-to-use-schannel-for-ssl
-sockets-on-windows/)
For the mechanics of actually doing the review get-together, since
people may be joining from various locations I can host the meeting with
my Adobe web meeting account - this would give us whiteboard, VOIP
audio, screen sharing. I believe I can record it and attach to the jira
if others want to review it later. If there's no better idea for
carrying this out, I'll set it up and post a URL here.
Also, what about a day/time? I can do it Tuesday after 11:00 US East
coast (UTC-0500), or Wednesday same time frame.
Thanks,
-Steve
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
RE: Request for review/discussion of proposed SSL additions for
C++ broker/client on Windows
Posted by Andrew Stitcher <as...@redhat.com>.
On Wed, 2010-01-13 at 09:49 -0500, Steve Huston wrote:
> Hi Gordon,
>
> I don't have a general phone conferencing setup, but I may be able to do
> 3-way calling if it's just you, me, and Andrew.
>
> Anyone else have a phone conference setup that wants to participate? I
> can integrate the phone conference into the Adobe meeting (I think) so
> it all gets recorded.
>
I've figured out how to book a phone conference on our system (I'm told
it's not much good for international callers though, but I guess we'll
see)
Toll-free +1.866.LINUX68 (866.546.8968)
* Toll +1.480.726.5802
* The following Red Hat office numbers can be dialed to reach the
bridge:
* Amersfoort: +31 33 450 3000, press 9 at the greeting
(unannounced option)
* Brisbane: +61 7 3514 8299
* Brno: +420 532 294 111, press 9 at the greeting (unannounced
option)
* Buenos Aires: +54 11 4341 6299
* Madrid: +34 91 414 8800, press 9 at the greeting (unannounced
option)
* Melbourne: +61 3 9624 8169
* Munich: +49 89 2050 71299
* Neuchatel: +41 32 720 9260, press 9 at the greeting (unannounced
option)
* Paris: +33 141 912 329
* Seoul: +82 02 3490-5288
* Singapore: +65 6512 5590
* Stockholm: +46 (0) 8 5057 5600, press 9 at the greeting
(unannounced option)
* Stuttgart: +49 711 96437 299
* Sydney: +61 2 8923-2899
* Tokyo: +81 03 5798 8488
Meeting ID: 6885
The call will open at 12pm EST and should be open 1 hour (though I can
change it I think)
Andrew
> -Steve
>
> > -----Original Message-----
> > From: Gordon Sim [mailto:gsim@redhat.com]
> > Sent: Tuesday, January 12, 2010 1:15 PM
> > To: dev@qpid.apache.org
> > Subject: Re: Request for review/discussion of proposed SSL
> > additions for C++ broker/client on Windows
> >
> >
> > On 01/12/2010 03:57 PM, Steve Huston wrote:
> > >> On Fri, 2010-01-08 at 12:54 +0000, Gordon Sim wrote:
> > >>> ...
> > >>> I can do tue or wed between 11:00 and 13:00 EST.
> > >>
> > >> At this point I'd prefer Weds, after 12:00 EST.
> > >>
> > >> So I guess 12:00 EST becomes the "best" time.
> > >
> > > Ok - I dropped the ball on setting up Tuesday, so let's do
> > Wednesday
> > > 12:00 EST.
> >
> > If you two would prefer a later time, I don't want my timezone to
> > constrain things and would be happy to let you two go ahead
> > without me.
> >
> > I should also note that at present the test referenced below
> > is showing
> > my connections as too slow. I may be luckier tomorrow but I don't
> > suppose there is a phone number to dial into for any audio is there?
> >
> > > If you have never attended a Connect Pro meeting before:
> > >
> > > Test your connection:
> > >
> > http://riverace.na6.acrobat.com/common/help/en/support/meeting_test.ht
> > > m
> >
> > ---------------------------------------------------------------------
> > Apache Qpid - AMQP Messaging Implementation
> > Project: http://qpid.apache.org
> > Use/Interact: mailto:dev-subscribe@qpid.apache.org
> >
> >
>
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project: http://qpid.apache.org
> Use/Interact: mailto:dev-subscribe@qpid.apache.org
>
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
RE: Request for review/discussion of proposed SSL additions for C++ broker/client on Windows
Posted by Steve Huston <sh...@riverace.com>.
Hi Gordon,
I don't have a general phone conferencing setup, but I may be able to do
3-way calling if it's just you, me, and Andrew.
Anyone else have a phone conference setup that wants to participate? I
can integrate the phone conference into the Adobe meeting (I think) so
it all gets recorded.
-Steve
> -----Original Message-----
> From: Gordon Sim [mailto:gsim@redhat.com]
> Sent: Tuesday, January 12, 2010 1:15 PM
> To: dev@qpid.apache.org
> Subject: Re: Request for review/discussion of proposed SSL
> additions for C++ broker/client on Windows
>
>
> On 01/12/2010 03:57 PM, Steve Huston wrote:
> >> On Fri, 2010-01-08 at 12:54 +0000, Gordon Sim wrote:
> >>> ...
> >>> I can do tue or wed between 11:00 and 13:00 EST.
> >>
> >> At this point I'd prefer Weds, after 12:00 EST.
> >>
> >> So I guess 12:00 EST becomes the "best" time.
> >
> > Ok - I dropped the ball on setting up Tuesday, so let's do
> Wednesday
> > 12:00 EST.
>
> If you two would prefer a later time, I don't want my timezone to
> constrain things and would be happy to let you two go ahead
> without me.
>
> I should also note that at present the test referenced below
> is showing
> my connections as too slow. I may be luckier tomorrow but I don't
> suppose there is a phone number to dial into for any audio is there?
>
> > If you have never attended a Connect Pro meeting before:
> >
> > Test your connection:
> >
> http://riverace.na6.acrobat.com/common/help/en/support/meeting_test.ht
> > m
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project: http://qpid.apache.org
> Use/Interact: mailto:dev-subscribe@qpid.apache.org
>
>
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
Re: Request for review/discussion of proposed SSL additions for C++
broker/client on Windows
Posted by Gordon Sim <gs...@redhat.com>.
On 01/12/2010 03:57 PM, Steve Huston wrote:
>> On Fri, 2010-01-08 at 12:54 +0000, Gordon Sim wrote:
>>> ...
>>> I can do tue or wed between 11:00 and 13:00 EST.
>>
>> At this point I'd prefer Weds, after 12:00 EST.
>>
>> So I guess 12:00 EST becomes the "best" time.
>
> Ok - I dropped the ball on setting up Tuesday, so let's do Wednesday
> 12:00 EST.
If you two would prefer a later time, I don't want my timezone to
constrain things and would be happy to let you two go ahead without me.
I should also note that at present the test referenced below is showing
my connections as too slow. I may be luckier tomorrow but I don't
suppose there is a phone number to dial into for any audio is there?
> If you have never attended a Connect Pro meeting before:
>
> Test your connection:
> http://riverace.na6.acrobat.com/common/help/en/support/meeting_test.htm
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
RE: Request for review/discussion of proposed SSL additions for C++ broker/client on Windows
Posted by Steve Huston <sh...@riverace.com>.
> On Fri, 2010-01-08 at 12:54 +0000, Gordon Sim wrote:
> > ...
> > I can do tue or wed between 11:00 and 13:00 EST.
>
> At this point I'd prefer Weds, after 12:00 EST.
>
> So I guess 12:00 EST becomes the "best" time.
Ok - I dropped the ball on setting up Tuesday, so let's do Wednesday
12:00 EST.
> Anyone else want to come?
Anyone is welcome... Here's the info for the meeting:
Meeting Name: Review Apache QPID C++ SSL Support on Windows Invited By:
STEVE HUSTON (SHUSTON@RIVERACE.COM)
When: 01/13/2010 12:00 PM - 1:00 PM
Time Zone: (GMT-05:00) Eastern Time (US and Canada)
To join the meeting:
http://riverace.na6.acrobat.com/qpid-cpp-ssl-windows/
----------------
If you have never attended a Connect Pro meeting before:
Test your connection:
http://riverace.na6.acrobat.com/common/help/en/support/meeting_test.htm
Get a quick overview: http://www.adobe.com/go/connectpro_overview
Adobe, the Adobe logo, Acrobat and Acrobat Connect are either registered
trademarks or trademarks of Adobe Systems Incorporated in the United
States and/or other countries.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
Re: Request for review/discussion of proposed SSL additions for
C++ broker/client on Windows
Posted by Andrew Stitcher <as...@redhat.com>.
On Fri, 2010-01-08 at 12:54 +0000, Gordon Sim wrote:
> ...
> I can do tue or wed between 11:00 and 13:00 EST.
At this point I'd prefer Weds, after 12:00 EST.
So I guess 12:00 EST becomes the "best" time.
Anyone else want to come?
Andrew
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
Re: Request for review/discussion of proposed SSL additions for C++
broker/client on Windows
Posted by Gordon Sim <gs...@redhat.com>.
On 01/08/2010 12:13 AM, Steve Huston wrote:
> I have just attached a new patch to QPID-1403
> (https://issues.apache.org/jira/browse/QPID-1403) with additions for SSL
> support on Windows for the C++ broker and client.
Excellent, thanks Steve!
> I would like to have a
> review of this before committing it to the repository.
>
> Andrew Stitcher has had a cursory look at an earlier version of the
> patch and suggested that he would like to have a more in-depth look and
> discussion post-0.6. We're looking at next week for this review. He
> suggested that Gordon Sim, as author of the Linux SSL support, may have
> particular insights to share as well. All other interested people are
> welcome and encouraged to join in.
>
> For some background info on Windows Schannel (the native SSL
> implementation on Windows) I wrote a blog overview of it recently - you
> may want to read that before the review meeting for this patch
> (http://stevehuston.wordpress.com/2009/12/29/how-to-use-schannel-for-ssl
> -sockets-on-windows/)
>
> For the mechanics of actually doing the review get-together, since
> people may be joining from various locations I can host the meeting with
> my Adobe web meeting account - this would give us whiteboard, VOIP
> audio, screen sharing. I believe I can record it and attach to the jira
> if others want to review it later. If there's no better idea for
> carrying this out, I'll set it up and post a URL here.
>
> Also, what about a day/time? I can do it Tuesday after 11:00 US East
> coast (UTC-0500), or Wednesday same time frame.
I can do tue or wed between 11:00 and 13:00 EST.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
RE: Request for review/discussion of proposed SSL additions for C++ broker/client on Windows
Posted by Steve Huston <sh...@riverace.com>.
Hi James,
> Steve Huston wrote:
> > For some background info on Windows Schannel (the native SSL
> > implementation on Windows) I wrote a blog overview of it recently -
> > you may want to read that before the review meeting for this patch
> >
> (http://stevehuston.wordpress.com/2009/12/29/how-to-use-schannel-for-s
> > sl
> > -sockets-on-windows/)
> >
> >
> I just commented to your blog:
Thanks- I'll get to that later this morning.
> from the sound of it, it should be possible to use a single
> architecture for SChannel and OpenSSL.
Ok... But the Linux Qpid SSL support uses NSS, not OpenSSL.
> Its not something I've done, but its on my radar to look at it.
Ok, cool - let us know when that comes up.
-Steve
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
Re: Request for review/discussion of proposed SSL additions for C++
broker/client on Windows
Posted by James Mansion <ja...@mansionfamily.plus.com>.
Steve Huston wrote:
> For some background info on Windows Schannel (the native SSL
> implementation on Windows) I wrote a blog overview of it recently - you
> may want to read that before the review meeting for this patch
> (http://stevehuston.wordpress.com/2009/12/29/how-to-use-schannel-for-ssl
> -sockets-on-windows/)
>
>
I just commented to your blog: from the sound of it, it should be
possible to use a single
architecture for SChannel and OpenSSL.
Its not something I've done, but its on my radar to look at it.
James
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org