#3161
  • Created on
    2013-03-19 15:16
  • Reported by
    sm-mr
  • Status
    Fixed
  • Priority
    Normal (3)
  • Assigned to
    viktorklang
  • Milestone
    2.2-M3
  • Plan Level
    -
  • Due Date
    -

Attachments

Related Tickets

Add new subtask or bug

SSL truststores ignored on server side

It seems that the code ignores the truststore given in akka.remote.netty.ssl.trust-store on the "server" side. Akka
will instead only use the system-wide Java truststore.

A test case is at https://github.com/io7m/akkatest-20130317/tree/ssl-test.

Running Server.scala and then Client.scala will demonstrate that the included tls/server/trust_store.jks isn't used.
User picture
  on 2013-03-19 15:17 *
By sm-mr
This is with akka 2.1.2, on

java version "1.7.0_17"
OpenJDK Runtime Environment (IcedTea7 2.3.8) (ArchLinux build 7.u17_2.3.8-1-x86_64)
OpenJDK 64-Bit Server VM (build 23.7-b01, mixed mode)
User picture
  on 2013-03-22 09:26 *
By viktorklang
Can you verify whether the following branch fixes the problem?

https://github.com/akka/akka/tree/wip-3161-use-truststore-on-server-too-%E2%88%9A
User picture
  on 2013-03-22 12:47 *
By sm-mr
Hm. There's still a strange "no cipher suites in common" error, but the output does at least show that the
server is correctly reading the truststore now. I'd consider this issue fixed.
User picture
  on 2013-03-25 07:12 *
By rkuhn
Milestone set to Current
User picture
  on 2013-03-25 07:12 *
By rkuhn
Status changed from New to Test
User picture
  on 2013-03-25 07:13 *
By rkuhn
Assigned to set to viktorklang
User picture
  on 2013-03-27 14:54 *
By viktorklang
Thanks. PR opened. Will be backported for the next 2.1.x release
User picture
  on 2013-04-03 21:59 *
By viktorklang
Status changed from Test to Fixed