Ok, I've made a little progress. I've figured out how to enable HTTPS inside
JBoss, but I still have problems when I try to configure the
JaasSecurityDomain.
If you just want to enable HTTPS, you need to add the algorithm parameter to
server.xml so that it looks like this:
| <Connector port="8443" minProcessors="5" maxProcessors="200"
| enableLookups="true" disableUploadTimeout="true"
| keystoreFile="${jboss.server.home.dir}/conf/.keystore"
| keystorePass="changeit" algorithm="IbmX509"
| acceptCount="200" debug="0" scheme="https" secure="true"
| clientAuth="false" sslProtocol="TLS" />
|
To verify this works, I temporarily deleted the mbean section of
jboss-service.xml that was added for JaasSecurityDomain and I switched
JaasSecurityManagerService back to using JaasSecurityManager. I restarted
JBoss and it started without errors. I was able to navigate to
https://localhost:8443 without problems.
Now I want to add JaasSecurityDomain back into my configureation, but when I
do, I get the SunX509 algorithm not available again. I'm a little confused as
to why all the tutorials say this is necessary. Can somebody explain what
functionality won't be secure if I leave this out?
Also, since I'm sure I need to enable the JaasSecurityDomain, can somebody tell
me how I can specify the proper algorithm for the JaasSecurityDomain to use?
By the way, I do have the default algorithms set to use IbmX509 in
java.security, so that doesn't fix this issue.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3908207#3908207
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3908207
-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam
for All Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628&alloc_id=16845&op=click
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user
