Author |
Message |
05/17/2010 11:51:48
|
jbppsu
neo
Joined: 05/05/2010 13:51:26
Messages: 2
Offline
|
I've put together a patch to allow distributed caching using RMI over SSL. Both the registry and the RMI calls are encrypted. It can be configured through options in the ehcache.xml file.
Unfortunately, it took awhile for me to get the go ahead to submit this. My changes were done on version 1.7.1. It will probably take a little bit of work to include these changes in the current version (I haven't explored this yet).
Before I go through the work of upgrading what I did to the latest version of ehcache I wanted to see if this is something that would get included in future releases if I submit it?
|
|
|
05/17/2010 16:35:26
|
kbhasin
consul
Joined: 12/04/2006 13:08:21
Messages: 340
Offline
|
I will let someone from Product management answer your specific query, but I was interested in the performance overhead of adding ssl. Did you run any comparison benchmarks? Did you use OpenSSL for this?
|
Regards,
Kunal Bhasin,
Terracotta, Inc.
Be a part of the Terracotta community: Join now! |
|
|
05/18/2010 06:40:57
|
jbppsu
neo
Joined: 05/05/2010 13:51:26
Messages: 2
Offline
|
No, I haven't done any benchmarks. There is certainly going to be a performance penalty, but for our application the data we are caching has to be encrypted in transit. So if we are going to distribute the cache it must use SSL.
I did not use OpenSSL. Starting with Java 5.0 there are two classes SslRMIServerSocketFactory and SslRMIClientSocketFactory that can be used to create secure RMI sockets. I just reworked the ehcache code to use those classes instead of RMIClientSocketFactory and RMIServerSocketFactory when some configuration flags are set.
|
|
|
07/19/2011 05:15:11
|
rajoshi
seraphim
Joined: 07/04/2011 04:36:10
Messages: 1491
Offline
|
Issue seems to be resolved.Please let us know if more information is required.
|
Rakesh Joshi
Senior Consultant
Terracotta. |
|
|
06/04/2013 19:21:16
|
ravichip
neo
Joined: 06/04/2013 19:16:44
Messages: 1
Offline
|
I have the same requirement: Use SSL for RMI Replication.
Has the patch been included in EHCache?
I'm using EHCache Version 2.5.1
I looked @ the ehcache.xml properties, but could not find any obvious properties to set.
Any information on how to accomplish this would be highly appreciated.
Thanks,
RC
|
|
|
07/02/2015 02:03:55
|
sohanb
neo
Joined: 07/02/2015 02:00:10
Messages: 2
Offline
|
I would like to have the details of this patch or changes done to Factory classes. Can you please point me there with some details?
Thanks!
|
|
|
10/04/2015 08:17:00
|
rojal100
neo
Joined: 10/04/2015 08:14:43
Messages: 1
Offline
|
Does it really work
|
|
|
10/05/2015 23:06:23
|
sohanb
neo
Joined: 07/02/2015 02:00:10
Messages: 2
Offline
|
I have modified few SSL classes of ehcache source code and made this work. I am able to read configuration via system property whether to use rmi with ssl/non-ssl.
I had no perfromance impact. Only first call takes time ,later on it works as simple as before.
|
|
|
|