Loading...

XML

Word

Printable

Minimal CLI command to create key store is

/subsystem=elytron/key-store=server:add(type="JKS")

But it has these problems:

Command let me create jks keystore without path specified. I understand this can't be validated on model level. But should be possible in subsystem, IMO :
If key-type is file-based, e.g. JKS or PKCS12 path can't be empty.
Password attribute has to be required. I can't think of case when that could be ommited.
Attribute type could be optional. If not set default value can be Keystore.getDefaultType(). As model cant't express this, it can be documented in description.

In result it will be possible to create key-store by this minimal CLI command:

/subsystem=elytron/key-store=server:add(path="server.jks", password="secret")

is cloned by

WFCORE-2402 Required attributes of elytron key-store creation add operation

relates to

JBEAP-6748 Elytron key-store requires set credential-reference which is wrongly marked as optional.

JBEAP-6757 Elytron key-managers requires set credential-reference which is wrongly marked as optional.