Hi,

On 6 February 2014 at 13:24:45, Ekroth (andree.ekr...@gmail.com) wrote:

Hello again,

Right, I'm running Linux, the /dev/random blocking fixed the delay, but still 
results in dead letters. I tried changing the key pairs to an example I found 
in the Akka bug tracker, but still the same problem.

I posted an older log of the client by mistake, I always start the server 
before the client obviously.

Here's the total output from client and server:
server:
https://gist.github.com/ekroth/db7279f02a99128b0440

client:
https://gist.github.com/ekroth/0f47e6b28df194508092

Do you know of a working example of a SSL setup with Akka?


The only setups we have are in the akka tests:
https://github.com/akka/akka/blob/master/akka-remote/src/test/scala/akka/remote/Ticket1978CommunicationSpec.scala
https://github.com/akka/akka/blob/master/akka-remote/src/test/scala/akka/remote/RemotingSpec.scala

Unfortuantely a bit convoluted since they test other things as well.

B/

Thanks

On Thursday, 6 February 2014 12:25:50 UTC+1, Björn Antonsson wrote:
Hi,

I couldn’t find any obvious errors in the gist.

One thing with the logs from the server is that it seems to take 21 seconds 
between the random number generator has been set and the SSLEngine is being set 
up. Are you running this on Linux? There is a know issue with /dev/random 
“blocking” for a while, see workaround here 
http://stackoverflow.com/a/2325109/1688542

Also the client seems to be up and running already. Shouldn’t the Server be up 
before the client is started, since the client seems to send a message to the 
server directly during startup?

B/

On 6 February 2014 at 06:44:42, Ekroth (andree...@gmail.com) wrote:

Hello,

I recently started experimenting with remote actors, and more specifically 
remote actors using SSL.
The setup works great without SSL, but as soon as I add SSL neither system can 
receive messages, I just get a Deadletter.
Akka version 2.3-RC2.

Somewhat minimal code example:
https://gist.github.com/ekroth/c564b572039d5f1b0fcd

Output from akka (when sending):

Client:

[info] [DEBUG] [02/05/2014 20:58:40.145] 
[client-akka.remote.default-remote-dispatcher-5] 
[NettyTransport(akka://client)] SSL random number generator set to: 
AES128CounterSecureRNG
[info] [DEBUG] [02/05/2014 20:58:40.205] 
[client-akka.remote.default-remote-dispatcher-5] 
[NettyTransport(akka://client)] Using client SSL context to create SSLEngine ...

Server:

[info] [DEBUG] [02/05/2014 20:58:40.251] [New I/O server boss #6] 
[NettyTransport(akka://server)] Server SSL is enabled, initialising ...
[info] [DEBUG] [02/05/2014 20:58:40.251] [New I/O server boss #6] 
[NettyTransport(akka://server)] SSL random number generator set to: 
AES128CounterSecureRNG
[info] [DEBUG] [02/05/2014 20:59:01.755] [New I/O server boss #6] 
[NettyTransport(akka://server)] Using server SSL context to create SSLEngine ...
[info] [DEBUG] [02/05/2014 20:59:01.758] 
[server-akka.remote.default-remote-dispatcher-6] 
[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0] now
supervising 
Actor[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3#1866262690]
[info] [DEBUG] [02/05/2014 20:59:01.758] 
[server-akka.remote.default-remote-dispatcher-5]
[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3]
 started
(akka.remote.transport.ProtocolStateActor@54b965a3)
[info] Got dead:
DeadLetter(Disassociated(Unknown),Actor[akka://server/deadLetters],Actor[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%\
2F%2Fserver%40127.0.0.1%3A48755-3#1866262690])
[info] [INFO] [02/05/2014 20:59:01.761] 
[server-akka.actor.default-dispatcher-17]
[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3]
 Message
[akka.remote.transport.AssociationHandle$Disassociated] from 
Actor[akka://server/deadLetters] to
Actor[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3#1866262690]
 was not delivered.
[3] dead letters encountered. This logging can be turned off or adjusted with 
configuration settings 'akka.log-dead-letters' and
'akka.log-dead-letters-during-shutdown'.
[info] [DEBUG] [02/05/2014 20:59:01.762] 
[server-akka.remote.default-remote-dispatcher-5]
[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3]
 stopped


I can't find any good examples of Akka with SSL, but it seems like it should be 
quite trivial to setup.
I have tested the keystores/truststores/keypairs with a simple Java SSL example 
(sending bytes with a socket), so there shouldn't be any problem there.

Any obvious errors?
--
>>>>>>>>>> Read the docs: http://akka.io/docs/
>>>>>>>>>> Check the FAQ: http://akka.io/faq/
>>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user
---
You received this message because you are subscribed to the Google Groups "Akka 
User List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to akka-user+...@googlegroups.com.
To post to this group, send email to akka...@googlegroups.com.
Visit this group at http://groups.google.com/group/akka-user.
For more options, visit https://groups.google.com/groups/opt_out.

-- 
Björn Antonsson
Typesafe – Reactive Apps on the JVM
twitter: @bantonsson

--
>>>>>>>>>> Read the docs: http://akka.io/docs/
>>>>>>>>>> Check the FAQ: http://akka.io/faq/
>>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user
---
You received this message because you are subscribed to the Google Groups "Akka 
User List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to akka-user+unsubscr...@googlegroups.com.
To post to this group, send email to akka-user@googlegroups.com.
Visit this group at http://groups.google.com/group/akka-user.
For more options, visit https://groups.google.com/groups/opt_out.

-- 
Björn Antonsson
Typesafe – Reactive Apps on the JVM
twitter: @bantonsson

-- 
>>>>>>>>>>      Read the docs: http://akka.io/docs/
>>>>>>>>>>      Check the FAQ: http://akka.io/faq/
>>>>>>>>>>      Search the archives: https://groups.google.com/group/akka-user
--- 
You received this message because you are subscribed to the Google Groups "Akka 
User List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to akka-user+unsubscr...@googlegroups.com.
To post to this group, send email to akka-user@googlegroups.com.
Visit this group at http://groups.google.com/group/akka-user.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to