\r
#### Java-based Clients\r
\r
-When using Java 7-based clients, SNI is enabled by default. You can disable SNI by specifying the JVM system parameter `-Djsse.enableSNIExtension=false` when your Java-based client launches.\r
+Luckily, Java 6-based clients ignore SNI alerts but when using Java 7-based clients, SNI checking is enabled by default. You can disable SNI alerts by specifying the JVM system parameter `-Djsse.enableSNIExtension=false` when your Java-based client launches.\r
\r
For Eclipse, you can append `-Djsse.enableSNIExtension=false` to your *eclipse.ini* file.\r
\r
Gitblit automatically adjusts itself to running on OpenShift. Repositories, users,\r
federation proposals, setting overrides, and Groovy push scripts are stored in *OPENSHIFT_DATA_DIR*.\r
\r
+### Recommended Settings\r
+\r
+You should disable the git daemon by setting *git.daemonPort=0*.\r
+\r
It is recommended to enable all RPC settings in the `web.xml` file to allow remote\r
administration and, more importantly, configuration of your Gitblit Express\r
installation using the Gitblit Manager.\r
- *groovy.scriptsFolder*\r
- *federation.proposalsFolder*\r
- *realm.userService* (for standard users.conf)\r
- \r
-Additionally, it is recommended to force your Gitblit installation to cleanup up\r
-older versions on your OpenShift filesystem to maximize available space for your\r
-repositories.\r
\r
-Append the following command to your ./openshift/action_hooks/build file:\r
+### Native Git Failures\r
+\r
+Unfortunately, sometime in early 2013 RedHat changed their SSL certificate such that cloning from/pushing to Gitblit Express over https fails due to an SNI (server name indication) TLS alert. There is no known workaround for native git and https.\r
+\r
+However, if your git client is JGit-based, like Eclipse/EGit, then you can workaround this problem and happily push/clone using https and OpenShift.\r
+\r
+Luckily, Java 6-based clients ignore SNI alerts but when using Java 7-based clients, SNI checking is enabled by default. You can disable SNI alerts by specifying the JVM system parameter `-Djsse.enableSNIExtension=false` when your Java-based client launches.\r
+\r
+For Eclipse, you can append `-Djsse.enableSNIExtension=false` to your *eclipse.ini* file.\r
\r
- rm -fr $OPENSHIFT_APP_DIR/jbossas-7.0/standalone/tmp/vfs/*\r
+### Heap and PermGen\r
\r
-Lastly, you may want to play with the heap and permgen settings of your Gitblit\r
+You may want to play with the heap and permgen settings of your Gitblit\r
instance because the default heap for the JVM is 95 MB, which may be a little\r
tight.\r
\r