Skip to content

Conversation

machi1990
Copy link
Member

Fixes #3221

== Using SSL with native executables

Note that if you enable SSL for the mailer and you want to build a native executable, you will need to enable the SSL support.
Please refer to the native-and-ssl-guide.html[Using SSL With Native Executables] guide for more information.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is still interesting as you might have to bundle the SSL libraries in your Docker image for instance.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So we keep this part?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, I would keep it.


Note that if you enable SSL for the mailer and you want to build a native executable, you will need to enable the SSL support.
Please refer to the native-and-ssl-guide.html[Using SSL With Native Executables] guide for more information.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you also update the list of extensions enabling SSL automatically here: https://quarkus.io/guides/native-and-ssl-guide ?

It's just after the sentence As SSL is ipso facto the standard nowadays, we decided to enable its support automatically for some of our extensions:.

I think we miss some of the recently added (Neo4j comes to mind). We should s/SmallRye REST client/REST client/ too. And maybe we should add the name of the extensions in parentheses (quarkus-mailer).

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch. I’ll update that part.

@machi1990 machi1990 force-pushed the enable-ssl-support-for-mailer branch from b062781 to 4007717 Compare July 30, 2019 11:56
====

=== Working with containers

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we want these changes, do we?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ooops, my IDE was not synced with recent changes. I'll revert this.

When working with containers, the idea is to bundle both the SunEC library and the certificates in the container and to point your binary to them using the system properties mentioned above.

You can for example modify your `Dockerfile.native` as follows to copy the required files to your final image:
You can for example modify your `Dockerfile.native` as following to allow copying the required lib in your final image:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like you reverted some changes I made recently.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch. Sorry for the noise. I'll rebase and apply the change I need to make.

* the Agroal connection pooling extension (`quarkus-agroal`),
* the Jaeger extension (`quarkus-jaeger`),
* the mailer extension (`quarkus-mailer`)
* the Neo4j extension (`quarkus-neo4j`).
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Neo4j was an example, there are a lot more missing. Just look for references to ExtensionSslNativeSupportBuildItem.

As for the Elasticsearch client extension, better name the Hibernate Search + Elasticsearch one because that's the one we want to advertise.

* the REST client extension (`quarkus-rest-client`),
* the Agroal connection pooling extension (`quarkus-agroal`),
* the Jaeger extension (`quarkus-jaeger`),
* the mailer extension (`quarkus-mailer`)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* the mailer extension (`quarkus-mailer`)
* the Mailer extension (`quarkus-mailer`)

@machi1990 machi1990 force-pushed the enable-ssl-support-for-mailer branch from 4007717 to 438897e Compare July 30, 2019 13:17
Copy link
Member

@gsmet gsmet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're nearly there :).

* the Agroal connection pooling extension,
* the Jaeger extension.
* the Agroal connection pooling extension (`quarkus-agroal`),
* the DynamoDB extension (`quarkus-amazon-dynamodb`),
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should talk about Amazon DynamoDB

* the Jaeger extension.
* the Agroal connection pooling extension (`quarkus-agroal`),
* the DynamoDB extension (`quarkus-amazon-dynamodb`),
* the Elasticsearch Rest client extension (`quarkus-elasticsearch-rest-client`),
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As said in another comment, here I would advertise the Hibernate Search + Elasticsearch extension instead of the client.

For now, we don't really want the users to include this extension directly.

----

== Using SSL with native executables

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Better with a new line.

@gsmet gsmet changed the title enable ssl support for mailer Make the Mailer extension trigger the SSL support Jul 30, 2019
@gsmet gsmet added this to the 0.20.0 milestone Jul 30, 2019
@machi1990 machi1990 force-pushed the enable-ssl-support-for-mailer branch from 438897e to 4367824 Compare July 30, 2019 14:04
Copy link
Member

@gsmet gsmet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cool thanks!

@gsmet gsmet added the triage/waiting-for-ci Ready to merge when CI successfully finishes label Jul 30, 2019
@gsmet gsmet merged commit d7c33c3 into quarkusio:master Jul 30, 2019
@gsmet
Copy link
Member

gsmet commented Jul 30, 2019

Merged, thanks!

@machi1990 machi1990 deleted the enable-ssl-support-for-mailer branch July 30, 2019 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

triage/waiting-for-ci Ready to merge when CI successfully finishes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Mailer extension should produce an ExtensionSslNativeSupportBuildItem

2 participants