jboss-cli.sh allows creation of an invalid jsse element within a security-domain -------------------------------------------------------------------------------- Key: WFLY-1575 URL: https://issues.jboss.org/browse/WFLY-1575 Project: WildFly Issue Type: Bug Components: Security Affects Versions: 8.0.0.Alpha2 Environment: Linux 3.9.4-200.fc18.x86_64 #1 SMP Fri May 24 20:10:49 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux Reporter: Thomas Hauser Assignee: Emmanuel Hugonnet Fix For: 8.0.0.Beta1 The jboss-cli.sh allows me to add a security-domain definition which is not valid. Apparently you *must* have a keystore-password or truststore-password, but this restriction is not enforced in the cli. I do not have too deep an understanding of how the cli decides that a given attribute is required, but I have seen cases where the cli will warn me if I try to do something without all required attributes. Something similar should probably be done here.