Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-19512

[GSS](7.4.z) Truststore is not used when client uses EJB over HTTPS

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Major Major
    • None
    • 7.3.1.GA
    • EJB, Security
    • None
    • Hide

      Set the truststore on the command line for the jvm
      ./bin/standalone.sh -Djavax.net.ssl.trustStore=./standalone/configuration/application.keystore -Djavax.net.ssl.trustStorePassword=password

      Show
      Set the truststore on the command line for the jvm ./bin/standalone.sh -Djavax.net.ssl.trustStore=./standalone/configuration/application.keystore -Djavax.net.ssl.trustStorePassword=password
    • Hide

      unzip -d $JBOSS_HOME/ simplied-app-reproducer.zip
      The test that fails:
      http://localhost:8080/reproducer/rest/test

      Show
      unzip -d $JBOSS_HOME/ simplied-app-reproducer.zip The test that fails: http://localhost:8080/reproducer/rest/test

      For picketbox when I tried to configure the default config which uses picketbox where I added the truststore, but for some reason I get the SSL error indicating the truststore is not set, so I set the system properties to be able to run the test.

      The client app is calling an EJB in the same JVM, where the self generated keystore is being used. Setting the truststore to the same keystore via the truststore tag in the ApplicationRealm does not work, setting the ./bin/standalone.sh -Djavax.net.ssl.trustStore=./standalone/configuration/application.keystore -Djavax.net.ssl.trustStorePassword=password does work.

                  <security-realm name="ApplicationRealm">
                      <server-identities>
                          <ssl>
                              <keystore path="application.keystore" relative-to="jboss.server.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/>
                          </ssl>
                      </server-identities>
                      <authentication>
                          <local default-user="$local" allowed-users="*" skip-group-loading="true"/>
                          <truststore path="application.keystore" relative-to="jboss.server.config.dir" keystore-password="password"/>
                          <properties path="application-users.properties" relative-to="jboss.server.config.dir"/>
                      </authentication>
                      <authorization>
                          <properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
                      </authorization>
                  </security-realm>
      

      TestSingleton -> EJB_ONE -> EJB_TWO -> EJB_THREE
      ]
      I configured it using picketbox/ApplicationRealm and for some reason the truststore does not get used, I had to specify the truststore on the command line:

      ./bin/standalone.sh -Djavax.net.ssl.trustStore=./standalone/configuration/application.keystore -Djavax.net.ssl.trustStorePassword=password

            rhn-support-bmaxwell Brad Maxwell
            rhn-support-bmaxwell Brad Maxwell
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: