ssl with James 2.3.0a1?

[Mikkel Troest <mi...@mikkle.dk>]

Hi all,

I'm currently running James 2.2.0 with pop3-tls and smtp-tls.
Everything works great and I'm very happy with it.

I've tried to install the James 2.3.0a1 snapshot. Everything ok until I 
try to enable
the ssl-configuration.

I enable ssl as described at: http://wiki.apache.org/james/UsingSSL

When I use:
---
<factory name="ssl"
       
class="org.apache.avalon.cornerstone.blocks.sockets.TLSServerSocketFactory"> 

  <ssl-factory>
      <keystore>
          <file>conf/keystore</file>
          <password>secret</password>
          <key-password>keysecret</key-password>
          <type>JKS</type>
          <protocol>TLS</protocol>
          <algorithm>SunX509</algorithm>
          <authenticate-client>false</authenticate-client>
      </keystore>
  </ssl-factory>
</factory>
---
- I get "element "ssl-factory" was found where no element may occur" In 
Phoenix log (along with a lot of related errors (see below)).

When I use:
---
<factory name="ssl"
       
class="org.apache.avalon.cornerstone.blocks.sockets.TLSServerSocketFactory"> 

  <keystore>
      <file>conf/keystore</file>
      <password>secret</password>
      <type>JKS</type>
      <protocol>TLS</protocol>
      <algorithm>SunX509</algorithm>
      <authenticate-client>false</authenticate-client>
  </keystore>
</factory>
---
(the old model?) I get the same error but with "element "keystore" was 
found...

Anyone out there with a working ssl-config for 2.3.0a1?

Please find attached phoenix.log and stack trace from cli starup.

Cheers!
:O) Mikkel Troest

Re: ssl with James 2.3.0a1?

[Mikkel Troest <mi...@mikkle.dk>]

It works beautifully!

Thanks!

:O) Mikkel Troest

Stefano Bagnara wrote:
> Mikkel Troest wrote:
>> Hi all,
>>
>> I'm currently running James 2.2.0 with pop3-tls and smtp-tls.
>> Everything works great and I'm very happy with it.
>>
>> I've tried to install the James 2.3.0a1 snapshot. Everything ok until 
>> I try to enable
>> the ssl-configuration.
>
> The correct configuration is the one with <ssl-factory>.
> Unfortunately there is a problem in the schema file for the ssl factory.
>
> I removed the <schema> definition from the .xinfo file for the 
> DefaultSocketFactory (from the cornerstone-sockets-impl-2.1.jar) and 
> it now seems to work.
>
> I'm committing an updated jar (named 
> cornerstone-sockets-impl-2.1-patched.jar) and removing the original one.
>
> Please let me know if it works.
>
> Stefano
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org

Re: ssl with James 2.3.0a1?

[Stefano Bagnara <ap...@bago.org>]

Mikkel Troest wrote:
> Hi all,
> 
> I'm currently running James 2.2.0 with pop3-tls and smtp-tls.
> Everything works great and I'm very happy with it.
> 
> I've tried to install the James 2.3.0a1 snapshot. Everything ok until I 
> try to enable
> the ssl-configuration.

The correct configuration is the one with <ssl-factory>.
Unfortunately there is a problem in the schema file for the ssl factory.

I removed the <schema> definition from the .xinfo file for the 
DefaultSocketFactory (from the cornerstone-sockets-impl-2.1.jar) and it 
now seems to work.

I'm committing an updated jar (named 
cornerstone-sockets-impl-2.1-patched.jar) and removing the original one.

Please let me know if it works.

Stefano



---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org