Re: After 100,000's of requests, I start getting status code 400 bad request for all requests

2020-05-20 Thread Oleg Kalnichevski
On Tue, 2020-05-19 at 11:39 -0500, Nicholas DiPiazza wrote: > Yep Kerberos is an option. If I get desperate. > Kerberos support is even worse. One ought to be using HTTP basic over TLS or digest. Oleg > > > On Tue, May 19, 2020 at 10:28 AM Oleg Kalnichevski > wrote: > > > On Tue, 2020-05-19

Re: SNI for http core v5 server (non-async)

2020-05-20 Thread Oleg Kalnichevski
On Tue, 2020-05-19 at 21:25 -0400, C c wrote: > I looked at emails and docs and can't find a trail on getting started > w/ > SNI. > > In netty, I can set up SNI to look up what domain is being requested > so I > can use a cert to the non-async server so I can serve multiple > domains with > 'Let's

Re: SNI for http core v5 server (non-async)

2020-05-20 Thread Vic
As long as it is possible, I'll proceed w/ DefaultTlsSetupHandler. thx. Vic On 5/20/20 7:05 AM, Oleg Kalnichevski wrote: On Tue, 2020-05-19 at 21:25 -0400, C c wrote: How do I do SNI in HTTP core v5 non-async server? Vic Hi Vic SNI extension APIs are available in Java as of version 11 on

Re: SNI for http core v5 server (non-async)

2020-05-20 Thread C c
It seems that DefaultTlsSetupHandler is final and I can't extend it. One way is for me to change the source so that I can extend it. Is there another suggested way I can adjust that class for SNI ? On Wed, May 20, 2020 at 7:05 AM Oleg Kalnichevski wrote: > On Tue, 2020-05-19 at 21:25 -0400, C

Re: SNI for http core v5 server (non-async)

2020-05-20 Thread C c
Maybe I just need to figure out what method to use on SSLContextBuilder? Would SSL context checker then know the requested domain I wonder? ( Since that is the only thing referenced in the only TLS example https://hc.apache.org/httpcomponents-core-5.0.x/httpcore5/examples/ClassicFileServerExample