Re: has anyone achieved to configure DB Connection Pool w/ DB2 ?

2001-01-19 Thread Serge Knystautas

I thought I wanted to quickly share my unsubscribe experience so people knew
why the list gets those occassional flames.

First, on orionserver.com, they have a text field to put your email address
and hit either subscribe or unsubscribe.  As far as I can tell, the
unsubscribe button actually does unsubscribe you, but the page that gets
displayed welcomes you to the list and otherwise appears as if you
subscribed (including alternate instructions on how to unsubscribe).  The
reason I think you are actually unsubscribed is that within 5 minutes you
get an email saying you've been unsubscribed.

Second, I continued to receive emails (about a dozen?) in past 3 hours after
unsubscribing.  I can understand that listserv messages sometimes queue up,
but since you receive the confirmation of unsubscrption immediately, it
feels as if the listserv isn't backed up (although this is probably a false
feeling).

Anyway, just wanted to share my experiences in case someone had some free
time to update the orionserver.com site.  The listserv has just become too
trafficked lately for me to keep up, which is a great sign to me even though
the releases aren't coming out.

Serge Knystautas
Loki Technologies
http://www.lokitech.com/





Re: Orion/SSL with 128bit-Thawte-Cert

2001-01-10 Thread Serge Knystautas

I've never tried to integrate JSSE with Orion, but we've used the latest
version 1.0.2 and the exportable version has strong encryption.  I'm also
almost certain we've used JSSE 1.0.2 as a client library to connect to 128
bit encrypted servers (that were set to not allow lower encryption).  I
can't say whether this means you can use the export version to create server
sockets with 128 bit encryption, but I would hope so.

Serge Knystautas
Loki Technologies
http://www.lokitech.com/
- Original Message -
From: "Sach Jobb" [EMAIL PROTECTED]


 This is legacy problem left over from the stupid restrictions on exporting
 encryption software from the United States.

 You will have to go to http://java.sun.com/products/jsse/ and download the
 latest version (i think it's 1.0.2) that's NOT FOR U.S. EXPORT. This
 version will support 128bit encryption. Please read the installation
 instructions as you will have to made some modifications to
 $JAVA_HOME/jre/lib/security/java.security.

 You --MIGHT-- need to create a new keystore and regenerate your
 certificate request and run through the whole process again.

 Read the instructions on orionserver.com howto carefully.

 People on this list have gotten Orion to work with Verisign's Netscape
 128bit certificate and thwate's 128bit SuperCert (or Super-something
 err-rather).

 cheers,
 sach






Re: Are these Orion bugs?

2001-01-07 Thread Serge Knystautas

- Original Message -
From: "Mike Cannon-Brookes" [EMAIL PROTECTED]


 My guess is that the bug lies in the combination of JSP +
Multipart-Encoded
 + Tags. I tried to do the exact same thing as yourself (create a tag to
 upload files) a few weeks ago and gave up after not being able to do it.

 If you do manage, or would like a hand / fellow coder to bounce ideas
off -
 give me a bell.

The difference has nothing to do with GET or POST.  The issue is that the
POST is multipart/form-data encoded.  This encodes the post very differently
which the servlet API (and accordingly JSPs) do not support.  It does not
matter whether you're checking a file parameter or a "normal" parameter...
the entire form is encoded the same way.

You'll have to use a utility class or something to parse the input stream
from the request and read the parameter data.  I've got a tag library that
detects whether the form was multipart/form-data and accordingly parse the
data

Serge Knystautas
Loki Technologies
http://www.lokitech.com/





Re: Help with Java obfuscators

2001-01-05 Thread Serge Knystautas

- Original Message -
From: "Christian Sell" [EMAIL PROTECTED]


 I dont think freeware is the right term, if I read the website correctly.
 What you get there is a 90 day evaluation for non-commercial purposes.
After
 that you may request a commercial license, but it does not say for how
much.

Most all software on alphaworks are being licensed for $1,000 for unlimited
use with no support.  I'm not sure about something like JAX since it's just
a utility... seems like it should be less. (like jikes which was made open
source)

Serge Knystautas
Loki Technologies
http://www.lokitech.com/


 
  I'm real happy with IBM's freeware product "JAX":
  http://www.alphaworks.ibm.com/tech/JAX.
 
  Incidentally this seems to be the same tool Evermind uses.
 
  --Mark
 






Re: Faster encryption

2000-12-12 Thread Serge Knystautas

 -Original Message-
 From: [EMAIL PROTECTED]
 Subject: Faster encryption


 I noticed a TPS drop (transactions per second) of factor four when I
 benchmarked my application using 128 bit SSL encryption (5 client threads)
 compared to non-encrypted benchmarking. I know that the SSL layer is
 pluggable in Orion, I use the standard one that comes with Orion 1.4.0.

 Is there a faster implementation of SSL for Java/Orion out there, maybe a
 native code solution? Or is the standard encryption package already using
 native code for the most critical sections? I guess not, as I
 have used C++
 packages for encryption previously and not noticed such CPU eating
 behaviour.

Another option is to put Apache in front of your Orion server and let it
handle SSL.  Since mod_ssl is written in native code with performance in
mind, it will generally be faster than a Java implementation.  I think the
next best alternative is to start load balancing across multiple web
servers.

Serge Knystautas
Loki Technologies
http://www.lokitech.com/





Re: Faster encryption

2000-12-12 Thread Serge Knystautas

- Original Message -
From: "Ismael Blesa Part" [EMAIL PROTECTED]


 Yes you can do this, but if you want client authentication how do you
configure
 Orion to get Digital Certificates from Apache.

I believe you can configure Apache to pass along the SSL certificate
information as environment variables, although I've never actually tested or
seen this working.  I know when you configure mod_ssl, there's a parameter
to pass these SSL params to CGI programs, so I would hope this would work
with the way Orion puts Apache in front of it (using the reverse proxy).

Hmmm...maybe not... maybe something like mod_jk or mod_ajp that Tomcat uses
to hook into Apache would work, but the more I think about it, I'm thinking
this would be a problem with the Apache-Orion architecture.  Sorry...

Serge Knystautas
Loki Technologies
http://www.lokitech.com/





Re: EJB2.0 Generated class uncompilable

2000-12-08 Thread Serge Knystautas

- Original Message -
From: "Peter Pontbriand" [EMAIL PROTECTED]


 We've just written our first pair of 2.0-spec EJBs and are experiencing
some
 really strange problems deploying them. Orion 1.4.4 auto-generates the DB
 tables for these beans, but then spits out the following message for every
 CMP field in each EJB:

I'm somewhat new to Orion (I've walked through all the examples and am using
it to learn EJB 2.0), and was curious where you can get the 1.4.4 version?
I assume this is beta or worse quality non-public release, which I'm more
than happy to use, and any directions as to how to get advanced releases
would be appreciated.

Serge Knystautas
Loki Technologies
http://www.lokitech.com/