Re: has anyone achieved to configure DB Connection Pool w/ DB2 ?
I thought I wanted to quickly share my unsubscribe experience so people knew why the list gets those occassional flames. First, on orionserver.com, they have a text field to put your email address and hit either subscribe or unsubscribe. As far as I can tell, the unsubscribe button actually does unsubscribe you, but the page that gets displayed welcomes you to the list and otherwise appears as if you subscribed (including alternate instructions on how to unsubscribe). The reason I think you are actually unsubscribed is that within 5 minutes you get an email saying you've been unsubscribed. Second, I continued to receive emails (about a dozen?) in past 3 hours after unsubscribing. I can understand that listserv messages sometimes queue up, but since you receive the confirmation of unsubscrption immediately, it feels as if the listserv isn't backed up (although this is probably a false feeling). Anyway, just wanted to share my experiences in case someone had some free time to update the orionserver.com site. The listserv has just become too trafficked lately for me to keep up, which is a great sign to me even though the releases aren't coming out. Serge Knystautas Loki Technologies http://www.lokitech.com/
Re: Orion/SSL with 128bit-Thawte-Cert
I've never tried to integrate JSSE with Orion, but we've used the latest version 1.0.2 and the exportable version has strong encryption. I'm also almost certain we've used JSSE 1.0.2 as a client library to connect to 128 bit encrypted servers (that were set to not allow lower encryption). I can't say whether this means you can use the export version to create server sockets with 128 bit encryption, but I would hope so. Serge Knystautas Loki Technologies http://www.lokitech.com/ - Original Message - From: "Sach Jobb" [EMAIL PROTECTED] This is legacy problem left over from the stupid restrictions on exporting encryption software from the United States. You will have to go to http://java.sun.com/products/jsse/ and download the latest version (i think it's 1.0.2) that's NOT FOR U.S. EXPORT. This version will support 128bit encryption. Please read the installation instructions as you will have to made some modifications to $JAVA_HOME/jre/lib/security/java.security. You --MIGHT-- need to create a new keystore and regenerate your certificate request and run through the whole process again. Read the instructions on orionserver.com howto carefully. People on this list have gotten Orion to work with Verisign's Netscape 128bit certificate and thwate's 128bit SuperCert (or Super-something err-rather). cheers, sach
Re: Are these Orion bugs?
- Original Message - From: "Mike Cannon-Brookes" [EMAIL PROTECTED] My guess is that the bug lies in the combination of JSP + Multipart-Encoded + Tags. I tried to do the exact same thing as yourself (create a tag to upload files) a few weeks ago and gave up after not being able to do it. If you do manage, or would like a hand / fellow coder to bounce ideas off - give me a bell. The difference has nothing to do with GET or POST. The issue is that the POST is multipart/form-data encoded. This encodes the post very differently which the servlet API (and accordingly JSPs) do not support. It does not matter whether you're checking a file parameter or a "normal" parameter... the entire form is encoded the same way. You'll have to use a utility class or something to parse the input stream from the request and read the parameter data. I've got a tag library that detects whether the form was multipart/form-data and accordingly parse the data Serge Knystautas Loki Technologies http://www.lokitech.com/
Re: Help with Java obfuscators
- Original Message - From: "Christian Sell" [EMAIL PROTECTED] I dont think freeware is the right term, if I read the website correctly. What you get there is a 90 day evaluation for non-commercial purposes. After that you may request a commercial license, but it does not say for how much. Most all software on alphaworks are being licensed for $1,000 for unlimited use with no support. I'm not sure about something like JAX since it's just a utility... seems like it should be less. (like jikes which was made open source) Serge Knystautas Loki Technologies http://www.lokitech.com/ I'm real happy with IBM's freeware product "JAX": http://www.alphaworks.ibm.com/tech/JAX. Incidentally this seems to be the same tool Evermind uses. --Mark
Re: Faster encryption
-Original Message- From: [EMAIL PROTECTED] Subject: Faster encryption I noticed a TPS drop (transactions per second) of factor four when I benchmarked my application using 128 bit SSL encryption (5 client threads) compared to non-encrypted benchmarking. I know that the SSL layer is pluggable in Orion, I use the standard one that comes with Orion 1.4.0. Is there a faster implementation of SSL for Java/Orion out there, maybe a native code solution? Or is the standard encryption package already using native code for the most critical sections? I guess not, as I have used C++ packages for encryption previously and not noticed such CPU eating behaviour. Another option is to put Apache in front of your Orion server and let it handle SSL. Since mod_ssl is written in native code with performance in mind, it will generally be faster than a Java implementation. I think the next best alternative is to start load balancing across multiple web servers. Serge Knystautas Loki Technologies http://www.lokitech.com/
Re: Faster encryption
- Original Message - From: "Ismael Blesa Part" [EMAIL PROTECTED] Yes you can do this, but if you want client authentication how do you configure Orion to get Digital Certificates from Apache. I believe you can configure Apache to pass along the SSL certificate information as environment variables, although I've never actually tested or seen this working. I know when you configure mod_ssl, there's a parameter to pass these SSL params to CGI programs, so I would hope this would work with the way Orion puts Apache in front of it (using the reverse proxy). Hmmm...maybe not... maybe something like mod_jk or mod_ajp that Tomcat uses to hook into Apache would work, but the more I think about it, I'm thinking this would be a problem with the Apache-Orion architecture. Sorry... Serge Knystautas Loki Technologies http://www.lokitech.com/
Re: EJB2.0 Generated class uncompilable
- Original Message - From: "Peter Pontbriand" [EMAIL PROTECTED] We've just written our first pair of 2.0-spec EJBs and are experiencing some really strange problems deploying them. Orion 1.4.4 auto-generates the DB tables for these beans, but then spits out the following message for every CMP field in each EJB: I'm somewhat new to Orion (I've walked through all the examples and am using it to learn EJB 2.0), and was curious where you can get the 1.4.4 version? I assume this is beta or worse quality non-public release, which I'm more than happy to use, and any directions as to how to get advanced releases would be appreciated. Serge Knystautas Loki Technologies http://www.lokitech.com/