Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-5950

Not able to configure list of key/trust managers on elytron ssl context.

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Do
    • Major
    • None
    • 7.1.0.DR4
    • Security
    • None

    Description

      Base on xsd/model documentation key-managers and trust-managers attributes seems to be meant to hold list of managers. That also comply to SSLContext init() method [1]. Hovewer, in elytron subsystem, they are of type string and any my tries to set list (space/comma delimited list) failed.

      XSD documentation

      • key-managers - Reference to the KeyManagers to be used by this SSLContext.
      • trust-managers - Reference to the TrustManagers to be used by this SSLContext.

      Model description:

      "key-managers" => {
          "type" => STRING,
          "description" => "Reference to the key managers to use within the SSLContext.",
          "expressions-allowed" => false,
          "nillable" => true,
          "capability-reference" => "org.wildfly.security.key-managers",
          "min-length" => 1L,
          "max-length" => 2147483647L,
          "access-type" => "read-write",
          "storage" => "configuration",
          "restart-required" => "resource-services"
      },
      
      "trust-managers" => {
          "type" => STRING,
          "description" => "Reference to the trust managers to use within the SSLContext.",
          "expressions-allowed" => false,
          "nillable" => true,
          "capability-reference" => "org.wildfly.security.trust-managers",
          "min-length" => 1L,
          "max-length" => 2147483647L,
          "access-type" => "read-write",
          "storage" => "configuration",
          "restart-required" => "resource-services"
      },
      

      [1] https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLContext.html#init-javax.net.ssl.KeyManager:A-javax.net.ssl.TrustManager:A-java.security.SecureRandom-

      Attachments

        Issue Links

          Activity

            People

              darran.lofthouse@redhat.com Darran Lofthouse
              mchoma@redhat.com Martin Choma
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: