Tag Info

New answers tagged

1

This question is probably off-topic for Server Fault. It's certainly opinion-based. The right architecture for your software depends on the network and security architecture of the environment in which the application will be used. It will also depend on the desired frequency of communication between the component parts and how much bandwidth polling versus ...


1

It's actually pretty easy. Best way depends on your client version, though, ultimately, you're just editing a registry value. You're looking in \HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy\ for the EnableJavaUpdate key. It's a REG_DWORD, and by default has a value of one. Set the value to 00000000 (eight zeroes). For XP, we put the below VBS ...


1

First off, don't use the Software Installation GPOs. They suck. Second off, make sure you have the proper "offline" Java installer. Then, create a startup script, and put it a GPO at \Computer configuration\Policies\Windows Settings\Scritps\Startup to install it. Must be a startup script, not a logon script, since startup scripts run under SYSTEM ...


0

So it turns out this was a non-issue all along. Apache will accept SSLv2 handshake with either of the configurations I posted above. I was misled by a handshake error into thinking this was the issue; it was really just a configuration issue where the server wasn't trusting the client's CA.


2

Apparently mod_ssl has changed in the last year or so (I haven't found the exact commit to the source, but found the "problem"). The source now does this: If SSLProtocol only includes only one Protocol: Handshake = That Protocol's Handshake Only Else Handshake = SSLv2 Handshake There's no override for this setting. The only thing you could do is ...


3

It may be helpful to keep your site-specific or host-specific key-store / trust-store outside the java installation-directory, and instead point to it when you need to consume trust. Presuming your trust-store is at /opt/site/cacerts.JKS, you would do that one of two ways: In your Java code, add a line like: ...


1

You can get the details via asadmin: asadmin get domain.resources.jdbc-connection-pool.NAME_OF_THE_CONNECTION_POOL.* e.g. asadmin get domain.resources.jdbc-connection-pool.PostgresConnectionPool.*


1

Also, where are the connection pool details stored? domains/domain1/config/domain.xml


2

The way I do (maybe not the best?): save cacerts before upgrade and restore after, I scripted it in my update script like this: 1) save: javaexe=`readlink -f /usr/bin/java` jredir=`dirname $javaexe` cacertsfile=${jredir}/../lib/security/cacerts [ -f $cacertsfile ] && cp -p $cacertsfile /tmp/cacerts 2) install updates (yum update or other way). ...


0

In general it'd best to avoid this sort of multi-question. It's hard to provide a definitive answer to four questions in one, especially with not fully overlapping areas of expertise. Still, best effort: Establishment of TCP socket connections is the same within EC2 as outside it. Everything you do in normal TCP/IP networking you do the same within ETC. ...


0

This is fixed now. It was a silly mistake from me. I had put all the files (tigase.mydomain.crt, tigase.mydomain.csr, tigase.mydomain.key, tigase.mydomain.pem) generated. And the "tigase.mydomain.crt" is the certificate without any private key also gets picked up for adding to the keystore and this is where the server throws the exception. This time I just ...


1

You should either set the -Xdebug -Xrunjdwp... switches in the JAVA_OPTS environment variable, or pass the jpda arguments to catalina.sh, but not both. If you do both, it will try to load the agent twice and give you an error. Edit: Personally I prefer to use the JAVA_OPTS switches because they give more control (e.g. to set the port number). Once you have ...


0

Start it (defining stop.port and stop.key variables): java -DSTOP.PORT=8080 -DSTOP.KEY=stop_jetty -jar start.jar then you can stop it: java -DSTOP.PORT=8080 -DSTOP.KEY=stop_jetty -jar start.jar --stop source


1

As stated on Openshift forums (and it's a security best practice): our firewall rules prevent connections to internal resources from anything but your application. this is by design since opening up internal resources to the world is a large security risk. Further in given thread, a method for local forwarding is given, but it's only on your ...


0

Problem solved: Dev finally allowed me to update Elasticsearch to 1.3.2, Java changed to Oracle latest at this time, Ruby driver Tire replaced with searchkick (because Dev said API was closer to Tire and official driver seemed too complicated to do a quick transition). With default configuration (no -Xmin and Xmax), Elasticsearch does not use more than ...



Top 50 recent answers are included