[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14242998#comment-14242998 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14237061#comment-14237061 ] Mamta A. Satoor commented on DERBY-6764: Looks like the

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14237084#comment-14237084 ] Mamta A. Satoor commented on DERBY-6764: I am able to repro the problem on my

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14235129#comment-14235129 ] Mamta A. Satoor commented on DERBY-6764: I ran the SSLTest suite multiple times

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14235136#comment-14235136 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=1428#comment-1428 ] Myrna van Lunteren commented on DERBY-6764: --- The check-in into 10.8 caused a

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14233389#comment-14233389 ] Mamta A. Satoor commented on DERBY-6764: Myrna, let me look into it. I see that we

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14232449#comment-14232449 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14222167#comment-14222167 ] Mamta A. Satoor commented on DERBY-6764: My failure mentioned above is happening

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=1465#comment-1465 ] Rick Hillegas commented on DERBY-6764: -- Hi Mamta, That error look suspiciously like

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14222327#comment-14222327 ] Mamta A. Satoor commented on DERBY-6764: Hi Rick, thanks for the pointer. I think

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14221082#comment-14221082 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14218154#comment-14218154 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14216239#comment-14216239 ] Bryan Pendleton commented on DERBY-6764: Is DERBY-6771 related to this issue at

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14216673#comment-14216673 ] Mamta A. Satoor commented on DERBY-6764: Bryan, I have not seen Plaintext

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14211379#comment-14211379 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14209347#comment-14209347 ] Mamta A. Satoor commented on DERBY-6764: It is ok to backport this fix for earlier

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14195958#comment-14195958 ] Knut Anders Hatlen commented on DERBY-6764: --- {code} if

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14196408#comment-14196408 ] Mamta A. Satoor commented on DERBY-6764: Knut, you are absolutely right about

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14196437#comment-14196437 ] Mamta A. Satoor commented on DERBY-6764: It is possible with some jvms to have

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197046#comment-14197046 ] Knut Anders Hatlen commented on DERBY-6764: --- Thanks for fixing this. Note,

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197049#comment-14197049 ] Knut Anders Hatlen commented on DERBY-6764: --- I see that there are failures in

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197090#comment-14197090 ] Knut Anders Hatlen commented on DERBY-6764: --- I'd suggest the following changes

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197210#comment-14197210 ] Mamta A. Satoor commented on DERBY-6764: I have been negligent with my checkin.

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197219#comment-14197219 ] Mamta A. Satoor commented on DERBY-6764: Commit 1636668 from Mamta A. Satoor in

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197646#comment-14197646 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14197712#comment-14197712 ] Knut Anders Hatlen commented on DERBY-6764: --- Thanks for fixing those issues. The

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14195758#comment-14195758 ] ASF subversion and git services commented on DERBY-6764: Commit

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14195849#comment-14195849 ] Knut Anders Hatlen commented on DERBY-6764: --- {code}

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14188622#comment-14188622 ] Mamta A. Satoor commented on DERBY-6764: I ran the Java program with multiple JVMs

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14188627#comment-14188627 ] Mamta A. Satoor commented on DERBY-6764: Notice the peculiar behavior for IBM jdk

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14188931#comment-14188931 ] Rick Hillegas commented on DERBY-6764: -- Hi Mamta, That is peculiar. By the way, I

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14188958#comment-14188958 ] Mamta A. Satoor commented on DERBY-6764: Hi Rick, I will make the change to remove

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14186957#comment-14186957 ] Mamta A. Satoor commented on DERBY-6764: Following java program lists the

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14183097#comment-14183097 ] Mamta A. Satoor commented on DERBY-6764: Rick, if we decide to change the derby

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14183436#comment-14183436 ] Rick Hillegas commented on DERBY-6764: -- Hi Mamta, I haven't played around with those

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14183447#comment-14183447 ] Rick Hillegas commented on DERBY-6764: -- Hi Myrna and Mamta, Can you see the

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14183652#comment-14183652 ] Mamta A. Satoor commented on DERBY-6764: I will look into this and see if I can

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14181271#comment-14181271 ] Rick Hillegas commented on DERBY-6764: -- As I understand the vulnerability now, the

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14181342#comment-14181342 ] Bryan Pendleton commented on DERBY-6764: It seems like our software is at the

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14181484#comment-14181484 ] Rick Hillegas commented on DERBY-6764: -- The instructions for disabling SSLv3 on

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14182144#comment-14182144 ] Rick Hillegas commented on DERBY-6764: -- We could also programmatically set the system

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14182193#comment-14182193 ] Myrna van Lunteren commented on DERBY-6764: --- Rick, thanks for posting that link

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14179626#comment-14179626 ] Mamta A. Satoor commented on DERBY-6764: I modified Rick's java program in my

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14178768#comment-14178768 ] Mamta A. Satoor commented on DERBY-6764: Just want to discuss one scenario on this

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14179021#comment-14179021 ] Myrna van Lunteren commented on DERBY-6764: --- I found this interesting

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14177428#comment-14177428 ] Myrna van Lunteren commented on DERBY-6764: --- At least with ibm 1.7 it is

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14177433#comment-14177433 ] Myrna van Lunteren commented on DERBY-6764: --- All in all, I think we can say we

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14175043#comment-14175043 ] Rick Hillegas commented on DERBY-6764: -- The vulnerability is described here:

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14175054#comment-14175054 ] Rick Hillegas commented on DERBY-6764: -- The following modified version of the program

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14175265#comment-14175265 ] Mamta A. Satoor commented on DERBY-6764: It looks like all SSL related code in

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14175281#comment-14175281 ] Mike Matrigali commented on DERBY-6764: --- Thanks rick for the program. Here are the

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14174351#comment-14174351 ] Myrna van Lunteren commented on DERBY-6764: --- Another area is the usage of JMX

[jira] [Commented] (DERBY-6764) analyze impact of poodle security alert on Derby client - server ssl support

[ https://issues.apache.org/jira/browse/DERBY-6764?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14174464#comment-14174464 ] Mike Matrigali commented on DERBY-6764: --- To start I don't have a lot expertise in