Eclipse Community Forums: EMF » [CDO][NET4J] SSL and negotiator type="challenge"

Home » Modeling » EMF » [CDO][NET4J] SSL and negotiator type="challenge"(SSL and negotiator type="challenge" not working)

Show: Today's Messages :: Show Polls :: Message Navigator

[CDO][NET4J] SSL and negotiator type="challenge" [message #1854960]

Tue, 20 September 2022 13:41

Alexander Stenzer

Messages: 9
Registered: April 2022

Junior Member

Hello,

i would like to use the ssl acceptor. So I switched my config from:

<acceptor type="tcp" listenAddr="0.0.0.0" port="2036">
 <negotiator type="challenge" description="@config/users"/> 
</acceptor>

<acceptor type="ssl" listenAddr="0.0.0.0" port="443">
 <negotiator type="challenge" description="@config/users"/> 
</acceptor>

SSL is working but the client is not able to connect.

If remove the negotiator everthing is working as it should:
So server side:

<acceptor type="ssl" listenAddr="0.0.0.0" port="443">
</acceptor>

and client:

final String connection = serverdns + ":" + 443;

/* create net4j config */
final IConnector connector = Net4jUtil.getConnector(IPluginContainer.INSTANCE, connectionType, connection);
final CDONet4jSessionConfiguration config = CDONet4jUtil.createNet4jSessionConfiguration();
		config.setConnector(connector);
		config.setRepositoryName(repositoryName);
	session = config.openNet4jSession();

Is working.
But with server side:

<acceptor type="ssl" listenAddr="0.0.0.0" port="443">
 <negotiator type="challenge" description="@config/users"/> 
</acceptor>

and client:

final String connection = serverdns + ":" + 443;

/* create login processor */
		final PasswordCredentialsProvider credentialsProvider = new PasswordCredentialsProvider(user, password);
		loginPostProcessor = new ConnectorCredentialsInjector(connection, credentialsProvider);
		IPluginContainer.INSTANCE.addPostProcessor(loginPostProcessor);

/* create net4j config */
final IConnector connector = Net4jUtil.getConnector(IPluginContainer.INSTANCE, connectionType, connection);
final CDONet4jSessionConfiguration config = CDONet4jUtil.createNet4jSessionConfiguration();
		config.setConnector(connector);
		config.setRepositoryName(repositoryName);
	session = config.openNet4jSession();

It fails.
The same code with tcp acceptor works fine.
Has anyone the same problem? I use ne new version with TLS 1.3 from git.

Alexander

Cheers
/Alexander

[Updated on: Tue, 20 September 2022 13:45]

Report message to a moderator

Re: [CDO][NET4J] SSL and negotiator type="challenge" [message #1854962 is a reply to message #1854960]

Tue, 20 September 2022 16:04

Eike Stepper

Messages: 6682
Registered: July 2009

Senior Member

Hi Alexander,

The Net4j negotiators are not needed with CDO because CDO has its own Diffie/Hellman-based credendials exchange. Just get rid of the <negotiator> element under the <acceptor> element.

Cheers
/Eike

----
http://www.esc-net.de
http://thegordian.blogspot.com
http://twitter.com/eikestepper

Report message to a moderator

Re: [CDO][NET4J] SSL and negotiator type="challenge" [message #1854963 is a reply to message #1854962]

Tue, 20 September 2022 16:14

Alexander Stenzer

Messages: 9
Registered: April 2022

Junior Member

Hi Eike,

if I understand you right. I remove the <negotiator> and replace is by

<authenticator type="file" description="@config/users"/>

under repository on the server side.

On the client side I remove the PostProcessor and add to the config.

final var credentialsProvider = new PasswordCredentialsProvider(user, password);
final var config = CDONet4jUtil.createNet4jSessionConfiguration();
config.setConnector(connector);
config.setRepositoryName(repositoryName);
config.setCredentialsProvider(credentialsProvider);

this should use the CDO user authenication

Thank you for your help.

Alexander

Cheers
/Alexander

Report message to a moderator