Uploaded image for project: 'Cloud Enablement'
  1. Cloud Enablement
  2. CLOUD-2758

[EAP] Update jgroups AUTH and SYM_ENCRYPT to use non deprecated configurations

    XMLWordPrintable

Details

    Description

      See pferraro's comments here: https://issues.jboss.org/browse/CLOUD-2417

      "The shared secret used by AUTH is specified as an elytron credential reference, and the token can use any digest algorithm (not just MD5 and SHA-1).
      e.g.
      <protocol type="AUTH">
      <digest-token algorithm="SHA-512"><!-- default is SHA-256 -->
      <shared-secret-reference clear-text="bLogGimU"/><!-- or use a credential store -->
      </digest-token>
      </protocol>

      Additionally, SYM_ENCRYPT should reference a elytron managed key store; the key entry password is specified as an elytron credential reference.
      <protocol type="SYM_ENCRYPT" key-store="jgroups" key-alias="secret"><!-- references /subsystem=elytron/keystore=jgroups -->
      <key-credential-reference clear-text="bLogGimU"/><!-- or use a credential store -->
      <property name="encrypt_entire_message">true</property>
      </protocol>
      "

      Attachments

        Issue Links

          Activity

            People

              kwills@redhat.com Ken Wills
              kwills@redhat.com Ken Wills
              Stanislav Kaleta Stanislav Kaleta (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: