summaryrefslogtreecommitdiff
path: root/startYACY.sh
diff options
context:
space:
mode:
authorreger <reger18@arcor.de>2015-07-29 23:30:05 +0200
committerreger <reger18@arcor.de>2015-07-29 23:30:05 +0200
commit2fb6ebe88a6eb3d0bf565e212abf79c71da37ae2 (patch)
treef1168a66355158a8c7f70170c2a11a5118851a96 /startYACY.sh
parentfbeae20b3a6fadd940613370467228b175ee8dce (diff)
move java environment parameter setting disabling SNI (Server Name Indicator) support for https connections from code to startup script allowing admin to ~easy/transparent alter the YaCy default FALSE setting.
Background: some user report problem with connecting/crawling some sites via https which require SNI support (by default switched off in YaCy). On the other hand systems not demanding SNI support are sometimes not properly configured and due to a bug/feature in java 1.7 connection is aborted. The later is more often the case, so the default is still fine. With the java start parameter expert user can no alter the startparameter to -Djsse.enableSNIExtension=true (java default) if they crawl more hosts requiring SNI support. The alternative to let YaCy try both during https handshake (deep inside the httpclient) is not pursut at this time.
Diffstat (limited to 'startYACY.sh')
-rwxr-xr-xstartYACY.sh4
1 files changed, 3 insertions, 1 deletions
diff --git a/startYACY.sh b/startYACY.sh
index bacf6c649..7598d7618 100755
--- a/startYACY.sh
+++ b/startYACY.sh
@@ -6,7 +6,9 @@ PIDFILE="yacy.pid"
OS="`uname`"
#get javastart args
-JAVA_ARGS="-server -Djava.awt.headless=true -Dfile.encoding=UTF-8";
+JAVA_ARGS="-server -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djsse.enableSNIExtension=false";
+#rem -Djsse.enableSNIExtension=false fix a ssl problem in Java 1.7, see http://teknosrc.com/javax-net-ssl-sslprotocolexception-handshake-alert-unrecognized_name-solved/
+
#JAVA_ARGS="-verbose:gc -XX:+PrintGCTimeStamps -XX:+PrintGCDetails $JAVA_ARGS";
#check if OS is Sun Solaris or one of the OpenSolaris distributions and use different version of id if necessary