Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Blocker
Fix Version/s: 7.1.0.DR5
Affects Version/s: 7.0.0.ER3
Component/s: Documentation, Security
Labels:
None

Affects:

Documentation (Ref Guide, User Guide, etc.)
CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.0.GA
Git Pull Request:
https://github.com/jbossas/jboss-eap7/pull/759
Steps to Reproduce:

Hide

1. setup nss tools to hold 2 keys (alias1 and alias2) based on
https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.3/html/Security_Guide/Enable_FIPS_140-2_Cryptography_for_SSL_on_Red_Hat_Enterprise_Linux_6.html

2. jboss-cli.sh -c "/core-service=management/security-realm=ManagementRealm/server-identity=ssl:add(keystore-provider=PKCS11, keystore-password=pass123+, alias=alias2)"

3. alias1 is used

Show
1. setup nss tools to hold 2 keys (alias1 and alias2) based on https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.3/html/Security_Guide/Enable_FIPS_140-2_Cryptography_for_SSL_on_Red_Hat_Enterprise_Linux_6.html 2. jboss-cli.sh -c "/core-service=management/security-realm=ManagementRealm/server-identity=ssl:add(keystore-provider=PKCS11, keystore-password=pass123+, alias=alias2)" 3. alias1 is used

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Unable to specify keystore alias for PKCS11 provider in SSL for security realm.

Specifying keystore alias works only for JKS keystore as stated here:

                 <xs:attribute name="alias" type="xs:string" use="optional">
                     <xs:annotation>
                         <xs:documentation>
                             The alias of the entry to use from the keystore, if specified all remaining
                             entries in the keystore will be ignored.
                             Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
                         </xs:documentation>
                     </xs:annotation>
                 </xs:attribute>

blocks

JBEAP-4120 FIPS mode issues

Resolved

is blocked by

ELY-402 A wrapper KeyStore that can filter by alias

Resolved

is cloned by

WFCORE-1233 Unable to specify alias for PKCS11 provider

Resolved

is incorporated by

JBEAP-6040 Upgrade to Elytron Subsystem 1.0.0.Alpha10

Closed

Assignee:: Jan Kalina (Inactive)

Reporter:: Martin Choma

Votes:: 1 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2015/12/16 8:49 AM

Updated:: 2021/10/24 6:41 AM

Resolved:: 2016/09/17 6:43 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates