Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-5274

EJB IOR contains wrong port (non-SSL port) information when SSL is required

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Major
    • None
    • None
    • IIOP
    • None

    Description

      Description of problem:

      • Configure JBoss to only allow IIOP connections over SSL
      • It is possible to do this, but the configuration is confusing (possibly a bug)

      Details of the setup/issue:

      • When enabling SSL for jacorb, it normally listens on both the non-ssl port and the ssl port
      • Setting server-requires="ServerAuth" causes the server to stop listening on non-ssl port
      • However, the IOR tells client to connect to non-ssl port ...even though its not listening on it

      String lookup = "corbaname:iiop:" + host + ":" + port +"#" + ejbLookupPath;

      // lookup the IIOP EJB
      Object iiopObj = ctx.lookup(lookup);

      // the call to the EJB will fail due to the port being wrong non-ssl vs ssl

      • The workaround is to use the following ior-setting to correct the port settings in the IOR

      /subsystem=jacorb/ior-settings=default/setting=transport-config:add(confidentiality=required)

      • Shouldn't setting "server-requires=ServerAuth" change the port info in the IOR?

      Attachments

        Issue Links

          Activity

            People

              tadamski@redhat.com Tomasz Adamski
              rhn-support-dehort Derek Horton
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: