Hi, On 6 February 2014 at 13:24:45, Ekroth (andree.ekr...@gmail.com) wrote:
Hello again, Right, I'm running Linux, the /dev/random blocking fixed the delay, but still results in dead letters. I tried changing the key pairs to an example I found in the Akka bug tracker, but still the same problem. I posted an older log of the client by mistake, I always start the server before the client obviously. Here's the total output from client and server: server: https://gist.github.com/ekroth/db7279f02a99128b0440 client: https://gist.github.com/ekroth/0f47e6b28df194508092 Do you know of a working example of a SSL setup with Akka? The only setups we have are in the akka tests: https://github.com/akka/akka/blob/master/akka-remote/src/test/scala/akka/remote/Ticket1978CommunicationSpec.scala https://github.com/akka/akka/blob/master/akka-remote/src/test/scala/akka/remote/RemotingSpec.scala Unfortuantely a bit convoluted since they test other things as well. B/ Thanks On Thursday, 6 February 2014 12:25:50 UTC+1, Björn Antonsson wrote: Hi, I couldn’t find any obvious errors in the gist. One thing with the logs from the server is that it seems to take 21 seconds between the random number generator has been set and the SSLEngine is being set up. Are you running this on Linux? There is a know issue with /dev/random “blocking” for a while, see workaround here http://stackoverflow.com/a/2325109/1688542 Also the client seems to be up and running already. Shouldn’t the Server be up before the client is started, since the client seems to send a message to the server directly during startup? B/ On 6 February 2014 at 06:44:42, Ekroth (andree...@gmail.com) wrote: Hello, I recently started experimenting with remote actors, and more specifically remote actors using SSL. The setup works great without SSL, but as soon as I add SSL neither system can receive messages, I just get a Deadletter. Akka version 2.3-RC2. Somewhat minimal code example: https://gist.github.com/ekroth/c564b572039d5f1b0fcd Output from akka (when sending): Client: [info] [DEBUG] [02/05/2014 20:58:40.145] [client-akka.remote.default-remote-dispatcher-5] [NettyTransport(akka://client)] SSL random number generator set to: AES128CounterSecureRNG [info] [DEBUG] [02/05/2014 20:58:40.205] [client-akka.remote.default-remote-dispatcher-5] [NettyTransport(akka://client)] Using client SSL context to create SSLEngine ... Server: [info] [DEBUG] [02/05/2014 20:58:40.251] [New I/O server boss #6] [NettyTransport(akka://server)] Server SSL is enabled, initialising ... [info] [DEBUG] [02/05/2014 20:58:40.251] [New I/O server boss #6] [NettyTransport(akka://server)] SSL random number generator set to: AES128CounterSecureRNG [info] [DEBUG] [02/05/2014 20:59:01.755] [New I/O server boss #6] [NettyTransport(akka://server)] Using server SSL context to create SSLEngine ... [info] [DEBUG] [02/05/2014 20:59:01.758] [server-akka.remote.default-remote-dispatcher-6] [akka://server/system/transports/akkaprotocolmanager.ssl.tcp0] now supervising Actor[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3#1866262690] [info] [DEBUG] [02/05/2014 20:59:01.758] [server-akka.remote.default-remote-dispatcher-5] [akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3] started (akka.remote.transport.ProtocolStateActor@54b965a3) [info] Got dead: DeadLetter(Disassociated(Unknown),Actor[akka://server/deadLetters],Actor[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%\ 2F%2Fserver%40127.0.0.1%3A48755-3#1866262690]) [info] [INFO] [02/05/2014 20:59:01.761] [server-akka.actor.default-dispatcher-17] [akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3] Message [akka.remote.transport.AssociationHandle$Disassociated] from Actor[akka://server/deadLetters] to Actor[akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3#1866262690] was not delivered. [3] dead letters encountered. This logging can be turned off or adjusted with configuration settings 'akka.log-dead-letters' and 'akka.log-dead-letters-during-shutdown'. [info] [DEBUG] [02/05/2014 20:59:01.762] [server-akka.remote.default-remote-dispatcher-5] [akka://server/system/transports/akkaprotocolmanager.ssl.tcp0/akkaProtocol-ssl.tcp%3A%2F%2Fserver%40127.0.0.1%3A48755-3] stopped I can't find any good examples of Akka with SSL, but it seems like it should be quite trivial to setup. I have tested the keystores/truststores/keypairs with a simple Java SSL example (sending bytes with a socket), so there shouldn't be any problem there. Any obvious errors? -- >>>>>>>>>> Read the docs: http://akka.io/docs/ >>>>>>>>>> Check the FAQ: http://akka.io/faq/ >>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user --- You received this message because you are subscribed to the Google Groups "Akka User List" group. To unsubscribe from this group and stop receiving emails from it, send an email to akka-user+...@googlegroups.com. To post to this group, send email to akka...@googlegroups.com. Visit this group at http://groups.google.com/group/akka-user. For more options, visit https://groups.google.com/groups/opt_out. -- Björn Antonsson Typesafe – Reactive Apps on the JVM twitter: @bantonsson -- >>>>>>>>>> Read the docs: http://akka.io/docs/ >>>>>>>>>> Check the FAQ: http://akka.io/faq/ >>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user --- You received this message because you are subscribed to the Google Groups "Akka User List" group. To unsubscribe from this group and stop receiving emails from it, send an email to akka-user+unsubscr...@googlegroups.com. To post to this group, send email to akka-user@googlegroups.com. Visit this group at http://groups.google.com/group/akka-user. For more options, visit https://groups.google.com/groups/opt_out. -- Björn Antonsson Typesafe – Reactive Apps on the JVM twitter: @bantonsson -- >>>>>>>>>> Read the docs: http://akka.io/docs/ >>>>>>>>>> Check the FAQ: http://akka.io/faq/ >>>>>>>>>> Search the archives: https://groups.google.com/group/akka-user --- You received this message because you are subscribed to the Google Groups "Akka User List" group. To unsubscribe from this group and stop receiving emails from it, send an email to akka-user+unsubscr...@googlegroups.com. To post to this group, send email to akka-user@googlegroups.com. Visit this group at http://groups.google.com/group/akka-user. For more options, visit https://groups.google.com/groups/opt_out.