[
https://issues.jboss.org/browse/WFLY-7125?page=com.atlassian.jira.plugin....
]
Martin Choma updated WFLY-7125:
-------------------------------
Description:
Minimal CLI command to create key store is
{code}
/subsystem=elytron/key-store=server:add(type="JKS")
{code}
But it has these problems:
* Password attribute has to be required. I can't think of case when that could be
ommited.
* Attribute {{type}} could be optional. If not set default value can be
Keystore.getDefaultType(). As model cant't express this, it can be documented in
description.
was:
Minimal CLI command to create key store is
{code}
/subsystem=elytron/key-store=server:add(type="JKS")
{code}
But it has these problems:
* Command let me create jks keystore without {{path}} specified. It is because
{{required}} attribute is default to false. I can think of 2 {{required=false}} usages:
PKCS11
some sort of dynamic key-store creation in runtime
But that looks to me as less common cases. I think dominantlly user will use file-based
key store type with existing keystore. So I would propose to change default {{required}}
default to true.
* Password attribute has to be required. I can't think of case when that could be
ommited.
* Attribute {{type}} could be optional. If not set default value can be
Keystore.getDefaultType(). As model cant't express this, it can be documented in
description.
In result it will be possible to create key-store by this minimal CLI command:
{code}
/subsystem=elytron/key-store=server:add(path="server.jks",
password="secret")
{code}
Required attributes of elytron key-store creation CLI command
-------------------------------------------------------------
Key: WFLY-7125
URL:
https://issues.jboss.org/browse/WFLY-7125
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Critical
Minimal CLI command to create key store is
{code}
/subsystem=elytron/key-store=server:add(type="JKS")
{code}
But it has these problems:
* Password attribute has to be required. I can't think of case when that could be
ommited.
* Attribute {{type}} could be optional. If not set default value can be
Keystore.getDefaultType(). As model cant't express this, it can be documented in
description.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)