Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-5411

adding JSSE to a security domain with the CLI does not persist

    XMLWordPrintable

Details

    • Hide
      1. create a domain
        /subsystem=security/security-domain=mydomain:add()
        {
        "outcome" => "success",
        "response-headers" => {"process-state" => "reload-required"}
        }

        # add JSSE settings:
        /subsystem=security/security-domain=mydomain/jsse=classic:add(keystore=[{"url" => "${jboss.server.config.dir}/jboss.keystore","password" => "secret"}])
        {
        "outcome" => "success",
        "response-headers" => { "operation-requires-reload" => true, "process-state" => "reload-required" }
        }

        # double check
        /subsystem=security/security-domain=mydomain:read-resource(recursive=true)
        {
        "outcome" => "success",
        "result" => {
        "acl" => undefined,
        "audit" => undefined,
        "authentication" => undefined,
        "authorization" => undefined,
        "cache-type" => undefined,
        "identity-trust" => undefined,
        "mapping" => undefined,
        "jsse" => {"classic" => {
        "additional-properties" => undefined,
        "cipher-suites" => undefined,
        "client-alias" => undefined,
        "client-auth" => undefined,
        "key-manager" => undefined,
        "keystore" => [{
        "url" => "${jboss.server.config.dir}/jboss.keystore",
        "password" => "secret"
        }],
        "protocols" => undefined,
        "server-alias" => undefined,
        "service-auth-token" => undefined,
        "trust-manager" => undefined,
        "truststore" => undefined
        }}
        },
        "response-headers" => {"process-state" => "reload-required"}

        }

      Now quit and stop the server, then look at the xml:

      <security-domain name="mydomain">
      <jsse/>
      </security-domain>

      So the settings are not written to the xml configuration file

      Show
      create a domain /subsystem=security/security-domain=mydomain:add() { "outcome" => "success", "response-headers" => {"process-state" => "reload-required"} } # add JSSE settings: /subsystem=security/security-domain=mydomain/jsse=classic:add(keystore= [{"url" => "${jboss.server.config.dir}/jboss.keystore","password" => "secret"}] ) { "outcome" => "success", "response-headers" => { "operation-requires-reload" => true, "process-state" => "reload-required" } } # double check /subsystem=security/security-domain=mydomain:read-resource(recursive=true) { "outcome" => "success", "result" => { "acl" => undefined, "audit" => undefined, "authentication" => undefined, "authorization" => undefined, "cache-type" => undefined, "identity-trust" => undefined, "mapping" => undefined, "jsse" => {"classic" => { "additional-properties" => undefined, "cipher-suites" => undefined, "client-alias" => undefined, "client-auth" => undefined, "key-manager" => undefined, "keystore" => [{ "url" => "${jboss.server.config.dir}/jboss.keystore", "password" => "secret" }], "protocols" => undefined, "server-alias" => undefined, "service-auth-token" => undefined, "trust-manager" => undefined, "truststore" => undefined }} }, "response-headers" => {"process-state" => "reload-required"} } Now quit and stop the server, then look at the xml: <security-domain name="mydomain"> <jsse/> </security-domain> So the settings are not written to the xml configuration file
    • Workaround Exists
    • Hide

      edit the xml manually

      Show
      edit the xml manually

    Description

      Adding JSSE setting to a security domain works in-memory, but they are not written to the xml file.

      Attachments

        Activity

          People

            tomazcerar Tomaž Cerar (Inactive)
            tfonteyn Tom Fonteyne (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: