Fork me on GitHub
#immutant
<
2015-11-15
>
tcrawley19:11:41

@jaen: I saw your question on IRC re:ALPN. I haven't tried it yet, but take a look at https://lists.jboss.org/pipermail/undertow-dev/2015-November/001412.html and see if that helps

jaen20:11:00

@tcrawley: I'm somewhat further now, I've figured I have to add this as a dep - [org.mortbay.jetty.alpn/alpn-boot "8.1.5.v20150921"] this made the application actually boot.

jaen20:11:14

But when I try to connect it fails the handshake reporting no ciphers present

jaen20:11:28

(defn start!
  "Starts the application."
  []

  (let [port (or (some-> environ/env :port Integer.)
                 8080)
        ssl-context (less-awful-ssl/ssl-context "certs/server.pkcs8" "certs/server.crt" "certs/rootCA.pem")
        configuration (-> (undertow/options {:host "0.0.0.0"
                                             :port port
                                             :ssl-port 8443
                                             :ssl-context ssl-context})
                          #_(update :configuration #(doto %
                                                    (.setServerOption UndertowOptions/ENABLE_HTTP2 true)
                                                    (.setServerOption UndertowOptions/ENABLE_SPDY true))))]
    (reset! check-amusement-park-job-handle (scheduling/schedule check-amusement-park-job job-interval))
    (reset! web-server-handle (web/run handler configuration))))

jaen20:11:35

This is how I try to setup the handler

jaen20:11:30

It was a bit of a pain to figure the options out, but I think they are right according to the docs

jaen20:11:50

I'm not sure what am I doing wrong so it reports no ciphers

jaen20:11:40

I tried generating certificatess both with the CA.pl method as described in less awful ssl repo and signing keys by hand as well

tcrawley20:11:08

hmm, would you mind filing an issue with a sample app? perhaps @jcrossley3 can take a look - I'm traveling now, so likely won't have a chance to look at it for a few days

jaen20:11:34

On the JIRA?

jaen20:11:47

Sure, I was going to do it as well, since that's what you said on IRC, I just thought I'd share that in case I'm doing something obviously wrong.

jaen20:11:25

I'll let you (or jcrossley3 if you prefer) know when I set the issue and repor app up.

tcrawley20:11:14

thanks! feel free to let us both know, and I'll take a look if I have the chance

jaen20:11:03

Sure thing, thanks for the interest! I was quite looking forward to Immutant supporting HTTP2

jaen20:11:24

And it turned out to be a bit hard to get working so far

jaen20:11:34

So help is appreciated a lot