Change in openflowjava[master]: Add get configuration function to be able to access the open...
|
Michal Polkorab
Ok, I see. I will merge the patch, but please note reading openflowjava configuration should be fine. But shutting down openflowjava may cause some exceptions in openflowplugin (although recovery should be possible) - so this needs to be thoroughly tested and documented.
I would also like to bring back to life one idea I had more than a year ago, when TLS support was being delivered - that is to have one common / shared keystore for all protocols. This shared keystore would be passed down to downstream projects (like openflowjava, bgpcep, netconf, ...) and these downstream projects would use it. We would need some separate bundle (to avoid cyclic dependencies - probably in aaa) that would handle the keystore instance and all downstream projects would depend on this bundle -> they would retrieve the keystore instance and use it. What do you think ?
Regards, Michal From: Mohamed ElSerngawy <melserngawy@...>
Sent: 16 December 2015 23:50 To: Michal Polkoráb Subject: Re: Change in openflowjava[master]: Add get configuration function to be able to access the open... Hi Michal,
Sorry I wouldn't be clear enough, if you check the below WIP patch, the user will need to configure the keystore information at compile time or he can create the keystore at runtime
we have 2 cases :
1- if the user already setup the TLS config at 42-openflowplugin.xml so I should check the keystore password and name to be in sequence with my bundle
config
2- if the user didn't set the TLS config " which is almost happen as the TLS config not exist by default :) " so I will need to update the connection config and restart the connection again, "same will need if the keystore will create by command not config".
hope my use case become clear, if u have any advice please let me know.
Thanks
On Wed, Dec 16, 2015 at 10:50 AM, Michal Polkoráb
<michal.polkorab@...> wrote:
MichalPolkoráb Software Engineer
|
|
Mohamed ElSerngawy <melserngawy@...>
Hi Michal, I'm pretty much have the same idea of having a shared keystore bundle used by all others downstream projects, but for the moment just need to depend on openflowjava to test what I'm doing and also it match the usecase I have, then we can re-implement the TLS connection in openflow projects. Thanks On Thu, Dec 17, 2015 at 4:49 AM, Michal Polkoráb <michal.polkorab@...> wrote:
|
|
Michal Polkorab
Ok, sounds good.
From: Mohamed ElSerngawy <melserngawy@...>
Sent: 17 December 2015 15:56 To: Michal Polkoráb Cc: openflowjava-dev Subject: Re: Change in openflowjava[master]: Add get configuration function to be able to access the open... Hi Michal,
I'm pretty much have the same idea of having a shared keystore bundle used by all others downstream projects, but for the moment just need to depend on openflowjava to test what I'm doing and also it match the usecase I have, then we can re-implement the
TLS connection in openflow projects.
Thanks
On Thu, Dec 17, 2015 at 4:49 AM, Michal Polkoráb
<michal.polkorab@...> wrote:
MichalPolkoráb Software Engineer
|
