Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-6030

Use elytron ssl-context for undertow default https listener

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Critical
    • None
    • 7.1.0.DR4
    • Security, Undertow
    • None

    Description

      In EAP 7.1.0 GA elytron will be default security solution, therefore default https should be backed by elytron ssl context rather than with deprecated legacy security realm.

      Default undertow https listener use legacy ssl context in standalone-elytron.xml .

      <https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
      

      Once elytron becomes default security solution in eap it has to use elytron ssl context. In meantime prepare such configuration in standalone-elytron.xml

      <https-listener name="https" socket-binding="https" ssl-context="elytron-ssl-context" enable-http2="true"/>
      

      Attachments

        Issue Links

          Activity

            People

              darran.lofthouse@redhat.com Darran Lofthouse
              mchoma@redhat.com Martin Choma
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: