Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #12516 from ↵ | Morten Tokle | 2020-03-10 | 5 | -13/+187 |
|\ | | | | | | | | | vespa-engine/bjorncs/support-proxy-protocol-in-jdisc Support proxy protocol for https connectors | ||||
| * | Use multi-thread safe list implementation | Bjørn Christian Seime | 2020-03-09 | 1 | -1/+2 |
| | | |||||
| * | Close server before inspecting access log | Bjørn Christian Seime | 2020-03-09 | 1 | -9/+8 |
| | | |||||
| * | Update abi-spec | Bjørn Christian Seime | 2020-03-09 | 1 | -2/+36 |
| | | |||||
| * | Support proxy protocol for https connectors | Bjørn Christian Seime | 2020-03-09 | 4 | -10/+150 |
| | | |||||
* | | Remove unused variable | Bjørn Christian Seime | 2020-03-09 | 1 | -2/+0 |
| | | |||||
* | | Remove wiring for pre-bound channels in Jetty integration | Bjørn Christian Seime | 2020-03-09 | 4 | -98/+7 |
|/ | |||||
* | Handle SSLHandshakeException without message | Bjørn Christian Seime | 2020-03-06 | 1 | -0/+1 |
| | | | | We have observed in production that some SSLHandshakeException instances do not have a message. | ||||
* | Rename new jdisc http ssl handshake metrics | Bjørn Christian Seime | 2020-03-05 | 1 | -5/+5 |
| | | | | Rename new metrics to final names concluded from architect review. | ||||
* | Handle SslConnectionFactory wrapped in DetectorConnectionFactory | Bjørn Christian Seime | 2020-03-05 | 1 | -0/+3 |
| | | | | | Support TLS mixed mode after recent Jetty upgrade in health check proxy handler. SslConnectionFactory is no longer a top-level connection factory in connector if mixed mode is enabled. | ||||
* | Replace deprecated OptionalSslConnectionFactory with DetectorConnectionFactory | Bjørn Christian Seime | 2020-03-05 | 1 | -7/+2 |
| | |||||
* | Revert "Replace deprecated OptionalSslConnectionFactory with ↵ | Bjørn Christian Seime | 2020-03-05 | 1 | -2/+7 |
| | | | | | | | | | DetectorConnectionFactory" This reverts commit a7bfbb407c71e96d3a2effb34836d04ce3cd9d70. HealthCheckProxyHandler is unable to retrieve underlying SSLContext if SslConnectionFactory is wrapped in a DetectorConnectionFactory. | ||||
* | Merge pull request #12442 from ↵ | Bjørn Christian Seime | 2020-03-05 | 6 | -61/+268 |
|\ | | | | | | | | | vespa-engine/revert-12440-revert-12415-bjorncs/ssl-handshake-metric Revert "Revert "Bjorncs/ssl handshake metric"" | ||||
| * | Use TLSv1.3 in test instead of TLSv1.1 | Bjørn Christian Seime | 2020-03-05 | 1 | -2/+2 |
| | | | | | | | | TLSv1.1 seems to be disabled in JDK distribution on internal CI platform. | ||||
| * | Revert "Revert "Bjorncs/ssl handshake metric"" | Bjørn Christian Seime | 2020-03-04 | 6 | -61/+268 |
| | | |||||
* | | Merge pull request #12438 from vespa-engine/bjorncs/upgrade-jetty | Bjørn Christian Seime | 2020-03-04 | 1 | -6/+2 |
|\ \ | |/ |/| | Upgrade Jetty to 9.4.27 | ||||
| * | Replace deprecated OptionalSslConnectionFactory with DetectorConnectionFactory | Bjørn Christian Seime | 2020-03-04 | 1 | -7/+2 |
| | | |||||
| * | Upgrade Jetty to 9.4.27 | Bjørn Christian Seime | 2020-03-04 | 1 | -0/+1 |
| | | |||||
* | | Revert "Bjorncs/ssl handshake metric" | Harald Musum | 2020-03-04 | 6 | -268/+61 |
|/ | |||||
* | Replace dash with underscore in the new metric names | Bjørn Christian Seime | 2020-03-04 | 1 | -5/+5 |
| | |||||
* | Add workaround for odd behaviour with Jetty or Apache httpclient | Bjørn Christian Seime | 2020-03-03 | 1 | -0/+9 |
| | |||||
* | Report SSL handshake failures in metric | Bjørn Christian Seime | 2020-03-03 | 4 | -7/+224 |
| | |||||
* | Add constructor overload with list of enabled ciphers and protocol versions | Bjørn Christian Seime | 2020-03-03 | 1 | -1/+13 |
| | |||||
* | Make TLS client auth configurable in test driver factory | Bjørn Christian Seime | 2020-03-03 | 2 | -4/+11 |
| | |||||
* | Remove unused raw() and exceptTrailer() methods | Bjørn Christian Seime | 2020-03-03 | 1 | -47/+0 |
| | |||||
* | Close connections used by SimpleHttpClient | Bjørn Christian Seime | 2020-03-03 | 1 | -4/+13 |
| | |||||
* | Merge pull request #12230 from ↵ | Bjørn Christian Seime | 2020-02-20 | 1 | -1/+2 |
|\ | | | | | | | | | vespa-engine/bjorncs/tls-hostname-validation-jrt-wiring Bjorncs/tls hostname validation jrt wiring | ||||
| * | Specify new DefaultTlsContext constructor parameter | Bjørn Christian Seime | 2020-02-17 | 1 | -1/+2 |
| | | |||||
* | | Close all connections on ssl handshake failure | Bjørn Christian Seime | 2020-02-19 | 1 | -2/+10 |
| | | |||||
* | | Specify default request timeouts | Bjørn Christian Seime | 2020-02-19 | 1 | -0/+8 |
| | | |||||
* | | Use persisent connections | Bjørn Christian Seime | 2020-02-19 | 1 | -3/+1 |
|/ | |||||
* | Use cipher/protocol config to configure Jetty | Bjørn Christian Seime | 2020-01-31 | 1 | -21/+48 |
| | |||||
* | Add connector config for enabled cipher suites and protocol versions | Bjørn Christian Seime | 2020-01-31 | 2 | -2/+19 |
| | |||||
* | Move cipher and protocol inclusion/exclusion logic to separate class | Bjørn Christian Seime | 2020-01-31 | 2 | -18/+38 |
| | |||||
* | State the configuration and purpose of health check proxy in the log | Bjørn Christian Seime | 2020-01-28 | 1 | -1/+7 |
| | |||||
* | Only use a client certificate if required | Bjørn Christian Seime | 2020-01-28 | 1 | -5/+25 |
| | |||||
* | Upgrade Apache httpclient+httpcore to newest version | Bjørn Christian Seime | 2020-01-10 | 1 | -1/+1 |
| | | | | | Use deprecated setSslcontext() in code that may run outside JDisc. | ||||
* | Revert "Bjorncs/java deps cleanup" | Harald Musum | 2020-01-10 | 1 | -1/+1 |
| | |||||
* | Upgrade Apache httpclient and httpcore to newest version | Bjørn Christian Seime | 2020-01-09 | 1 | -1/+1 |
| | |||||
* | Non-functional changes | Jon Bratseth | 2020-01-06 | 1 | -0/+1 |
| | |||||
* | Remove use of apache commons libraries in jdisc_http_service | Bjørn Christian Seime | 2020-01-03 | 2 | -16/+20 |
| | |||||
* | Log effective SSL setup on JDisc startup | Bjørn Christian Seime | 2019-12-16 | 1 | -0/+18 |
| | |||||
* | Revert "Move cipher and protocol inclusion/exclusion logic to separate class" | Jon Marius Venstad | 2019-12-09 | 2 | -38/+18 |
| | | | | This reverts commit 7d8233a7d9ab9a177d689b6faa03ae8dd7e4e13a. | ||||
* | Revert "Add connector config for enabled cipher suites and protocol versions" | Jon Marius Venstad | 2019-12-09 | 1 | -6/+0 |
| | | | | This reverts commit f0771b350536dffaeeb5d4c2878da495437e611e. | ||||
* | Revert "Use cipher/protocol config to configure Jetty" | Jon Marius Venstad | 2019-12-09 | 1 | -48/+21 |
| | | | | This reverts commit 645a7d5190b95c0a47fac52d48327192b7c8e405. | ||||
* | Revert "Update ABI spec file" | Jon Marius Venstad | 2019-12-09 | 1 | -13/+2 |
| | | | | This reverts commit 3eb2a26b3183d876ebf38fc942b1f5802e1d66f8. | ||||
* | Revert "Allow config of ssl cipher suites and protocol version" | Jon Marius Venstad | 2019-12-09 | 3 | -20/+38 |
| | |||||
* | Only enable ciphers supported by current JVM | Bjørn Christian Seime | 2019-12-05 | 1 | -2/+2 |
| | |||||
* | Log effective SSL setup on JDisc startup | Bjørn Christian Seime | 2019-12-04 | 1 | -0/+18 |
| | |||||
* | Remove unused class | Bjørn Christian Seime | 2019-12-04 | 1 | -36/+0 |
| |