[ https://issues.jboss.org/browse/WFCORE-2992?page=com.atlassian.jira.plugi... ] Matthew Casperson commented on WFCORE-2992: ------------------------------------------- This is the slave host.xml file. It was never configured to use the HTTPS 19993 port at all. I'm not sure why configuring HTTPS on the admin console made any difference, but after enabling it I can replicate the failed restart right away. {code:xml} <?xml version='1.0' encoding='UTF-8'?> <host name="wildfly-slave-S-1-5-21-937368224-141896396-2868807245" xmlns="urn:jboss:domain:5.0"> <extensions> <extension module="org.jboss.as.jmx"/> <extension module="org.wildfly.extension.core-management"/> <extension module="org.wildfly.extension.elytron"/> </extensions> <vault> <vault-option name="KEYSTORE_URL" value="C:\wildfly_slave\wildfly-11.0.0.Alpha1/vault.keystore"/> <vault-option name="KEYSTORE_PASSWORD" value="MASK-3Df3uyvBoWIUyDzYqtHJqA"/> <vault-option name="KEYSTORE_ALIAS" value="vault"/> <vault-option name="SALT" value="abcdefgh"/> <vault-option name="ITERATION_COUNT" value="50"/> <vault-option name="ENC_FILE_DIR" value="C:\wildfly_slave\wildfly-11.0.0.Alpha1/vault/"/> </vault> <management> <security-realms> <security-realm name="ManagementRealm"> <server-identities> <secret value="${VAULT::MyVault::wildfly_slave_password::1}"/> </server-identities> <authentication> <local default-user="$local" skip-group-loading="true"/> <properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir"/> </authentication> <authorization map-groups-to-roles="false"> <properties path="mgmt-groups.properties" relative-to="jboss.domain.config.dir"/> </authorization> </security-realm> <security-realm name="ApplicationRealm"> <server-identities> <ssl> <keystore path="application.keystore" relative-to="jboss.domain.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/> </ssl> </server-identities> <authentication> <local default-user="$local" allowed-users="*" skip-group-loading="true"/> <properties path="application-users.properties" relative-to="jboss.domain.config.dir"/> </authentication> <authorization> <properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/> </authorization> </security-realm> <security-realm name="octopus-ssl-realm"> <server-identities> <ssl> <keystore path="C:\keystore.jks" keystore-password="Password01" alias="octopus"/> </ssl> </server-identities> </security-realm> </security-realms> <audit-log> <formatters> <json-formatter name="json-formatter"/> </formatters> <handlers> <file-handler name="host-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.domain.data.dir"/> <file-handler name="server-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/> </handlers> <logger log-boot="true" log-read-only="false" enabled="false"> <handlers> <handler name="host-file"/> </handlers> </logger> <server-logger log-boot="true" log-read-only="false" enabled="false"> <handlers> <handler name="server-file"/> </handlers> </server-logger> </audit-log> <management-interfaces> <native-interface security-realm="ManagementRealm"> <socket interface="management" port="${jboss.management.native.port:29999}"/> </native-interface> </management-interfaces> </management> <domain-controller> <remote security-realm="ManagementRealm" username="slave"> <discovery-options> <static-discovery name="primary" protocol="${jboss.domain.master.protocol:remote}" host="${jboss.domain.master.address:10.1.1.1}" port="${jboss.domain.master.port:19999}"/> </discovery-options> </remote> </domain-controller> <interfaces> <interface name="management"> <inet-address value="10.1.1.1"/> </interface> <interface name="public"> <inet-address value="10.1.1.1"/> </interface> </interfaces> <jvms> <jvm name="default"> <heap size="64m" max-size="256m"/> <jvm-options> <option value="-server"/> <option value="-XX:MetaspaceSize=96m"/> <option value="-XX:MaxMetaspaceSize=256m"/> </jvm-options> </jvm> </jvms> <servers> <server name="server-one" group="main-server-group"> <socket-bindings port-offset="2000"/> </server> <server name="server-two" group="other-server-group"> <socket-bindings port-offset="150"/> </server> </servers> <profile> <subsystem xmlns="urn:jboss:domain:core-management:1.0"/> <subsystem xmlns="urn:jboss:domain:jmx:1.3"> <expose-resolved-model/> <expose-expression-model/> <remoting-connector/> </subsystem> <subsystem xmlns="urn:wildfly:elytron:1.0" final-providers="combined-providers"> <providers> <aggregate-providers name="combined-providers"> <providers name="elytron"/> <providers name="openssl"/> </aggregate-providers> <provider-loader name="elytron" module="org.wildfly.security.elytron"/> <provider-loader name="openssl" module="org.wildfly.openssl"/> </providers> <audit-logging> <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.domain.log.dir" format="JSON"/> </audit-logging> <security-domains> <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper" security-event-listener="local-audit"> <realm name="ManagementRealm" role-decoder="groups-to-roles"/> <realm name="local" role-mapper="super-user-mapper"/> </security-domain> </security-domains> <security-realms> <identity-realm name="local" identity="$local"/> <properties-realm name="ManagementRealm"> <users-properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ManagementRealm"/> <groups-properties path="mgmt-groups.properties" relative-to="jboss.domain.config.dir"/> </properties-realm> </security-realms> <mappers> <constant-permission-mapper name="default-permission-mapper"> <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/> </constant-permission-mapper> <constant-realm-mapper name="local" realm-name="local"/> <simple-role-decoder name="groups-to-roles" attribute="groups"/> <constant-role-mapper name="super-user-mapper"> <role name="SuperUser"/> </constant-role-mapper> </mappers> <http> <http-authentication-factory name="management-http-authentication" http-server-mechanism-factory="global" security-domain="ManagementDomain"> <mechanism-configuration> <mechanism mechanism-name="BASIC"> <mechanism-realm realm-name="Management Realm"/> </mechanism> </mechanism-configuration> </http-authentication-factory> <provider-http-server-mechanism-factory name="global"/> </http> <sasl> <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain"> <mechanism-configuration> <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> <mechanism mechanism-name="DIGEST-MD5"> <mechanism-realm realm-name="ManagementRealm"/> </mechanism> </mechanism-configuration> </sasl-authentication-factory> <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron"> <properties> <property name="wildfly.sasl.local-user.default-user" value="$local"/> </properties> <filters> <filter> <pattern-filter value="JBOSS-LOCAL-USER"/> </filter> <filter> <pattern-filter value="DIGEST-MD5"/> </filter> </filters> </configurable-sasl-server-factory> <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global"> <filters> <filter provider-name="WildFlyElytron"/> </filters> </mechanism-provider-filtering-sasl-server-factory> <provider-sasl-server-factory name="global"/> </sasl> </subsystem> </profile> </host> {code} -- This message was sent by Atlassian JIRA (v7.2.3#72005)