]
Darran Lofthouse commented on WFLY-7091:
----------------------------------------
The references capability is of multiple key-managers and trust managers: -
Although the API is about having an array with multiple 'Managers' the reality is
this always tends to be an array of length 1 containing just an X.509 manager. If
aggregation is ever justified instead of supporting the list here I think I would add
aggregate-key/trust-manager resources which is a similar pattern to how other components
are currently aggregated,
Not able to configure list of key/trust managers on elytron ssl
context.
------------------------------------------------------------------------
Key: WFLY-7091
URL:
https://issues.jboss.org/browse/WFLY-7091
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Martin Choma
Assignee: Darran Lofthouse
Base on xsd/model documentation key-managers and trust-managers attributes seems to be
meant to hold list of managers. That also comply to SSLContext init() method [1]. Hovewer,
in elytron subsystem, they are of type string and any my tries to set list (space/comma
delimited list) failed.
XSD documentation
* key-managers - Reference to the KeyManagers to be used by this SSLContext.
* trust-managers - Reference to the TrustManagers to be used by this SSLContext.
Model description:
{noformat}
"key-managers" => {
"type" => STRING,
"description" => "Reference to the key managers to use within the
SSLContext.",
"expressions-allowed" => false,
"nillable" => true,
"capability-reference" =>
"org.wildfly.security.key-managers",
"min-length" => 1L,
"max-length" => 2147483647L,
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "resource-services"
},
"trust-managers" => {
"type" => STRING,
"description" => "Reference to the trust managers to use within the
SSLContext.",
"expressions-allowed" => false,
"nillable" => true,
"capability-reference" =>
"org.wildfly.security.trust-managers",
"min-length" => 1L,
"max-length" => 2147483647L,
"access-type" => "read-write",
"storage" => "configuration",
"restart-required" => "resource-services"
},
{noformat}
[1]
https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLContext.html#i...