[JBoss JIRA] (AS7-3322) Need to review how the SSL port is specified for the HTTP management interface.
8:43 a.m.
Darran Lofthouse created AS7-3322:
-------------------------------------
Summary: Need to review how the SSL port is specified for the HTTP management
interface.
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:09 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Brian Stansberry reassigned AS7-3322:
-------------------------------------
Assignee: Tomaz Cerar (was: Darran Lofthouse)
[10:26am] darranl: Nihility, bstansberry it was this one - we don't have a socket
binding for the HTTPS port https://issues.jboss.org/browse/AS7-3322 so it is a bit
inconsistent when we enable SSL
[10:32am] bstansberry: darranl: oh, we're just supporting config of the HTTP socket
via a binding
[10:32am] bstansberry: , not the HTTPS one
[10:32am] darranl: bstansberry, the issue is that before the socket binding we have a
normal port an a secure port, the socket binding works for the non secured port but we
have to revert to the non socket binding to enable https - also we can't really do
https on it's own as at the very least browsers should be able to connect http and be
redirected
[10:34am] bstansberry: darranl: assign it to me; i'll find re-assign it
[10:34am] bstansberry: if there's anything tricky about it, please leave a comment in
the JIRA
[10:35am] bstansberry: my assumption is it's just a matter of adding the appropriate
config and using it
[10:35am] darranl: bstansberry, I don't think there is anything tricky - for the
purpose of that Jira we just need both ports to be definable using a socket-binding and
only open the ports specified
[10:35am] bstansberry: darranl: cool, that should be no problem
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Tomaz Cerar
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:17 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Brian Stansberry commented on AS7-3322:
---------------------------------------
Darran: I was going to explain some details for Tomaz, but now I'm confused.
The schema for the <management-interfaces><http-management-interface> type
is:
<xs:complexType name="http-management-socket-binding-refType">
<xs:annotation>
<xs:documentation>
Reference to the configurations of the sockets to be used by a standalone
server's exposed HTTP and HTTPS management interface.
</xs:documentation>
</xs:annotation>
<xs:attribute name="http" type="xs:string"
use="optional">
<xs:annotation>
<xs:documentation>
Name of a socket-binding configuration declared in the server's
socket-binding-group to use for a HTTP socket.
</xs:documentation>
</xs:annotation>
</xs:attribute>
<xs:attribute name="https" type="xs:string"
use="optional">
<xs:annotation>
<xs:documentation>
Name of a socket-binding configuration declared in the server's
socket-binding-group to use for a HTTPS socket.
</xs:documentation>
</xs:annotation>
</xs:attribute>
</xs:complexType>
There are 2 attributes, one for HTTP one for HTTPS. What's missing?
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Tomaz Cerar
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:21 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Tomaz Cerar commented on AS7-3322:
----------------------------------
I really don't think this is still the issues.
as configuration that I use for quite a while looks like this:
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Tomaz Cerar
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:23 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Tomaz Cerar edited comment on AS7-3322 at 1/25/12 12:23 PM:
------------------------------------------------------------
I really don't think this is still the issues.
as configuration that I use for quite a while looks like this: {code:xml}<connector
name="https" protocol="HTTP/1.1" scheme="https"
socket-binding="https" secure="true">{code}
and under socket-binding I have:
{code:xml}<socket-binding name="https" port="443"/>{code}
Am I missing something?
was (Author: ctomc):
I really don't think this is still the issues.
as configuration that I use for quite a while looks like this:
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Tomaz Cerar
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:53 p.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse commented on AS7-3322:
---------------------------------------
Brian - looking at that they may both be there - I am going to take this back as I am
testing SSL at the start of next week so can verify the config with that task.
Hi Tomaz, for this issue we are talking about the HTTP interface for domain management,
the XML you quote is JBoss Web connectors which are defined independently.
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Tomaz Cerar
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:55 p.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse reassigned AS7-3322:
-------------------------------------
Assignee: Darran Lofthouse (was: Tomaz Cerar)
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:59 p.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Tomaz Cerar commented on AS7-3322:
----------------------------------
Darran, yes I have misread the description.
For http(s) management there are both possibilities and there is also some validation in
place(see: HttpManagementWriteAttributeHandler.java) to assure that you just use one of
them.
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:50 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse commented on AS7-3322:
---------------------------------------
In that case there may still be an issue to resolve as they should be able to specify both
ports.
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
1:44 p.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Brian Stansberry commented on AS7-3322:
---------------------------------------
The validation in HttpManagementWriteAttributeHandler is just checking the user isn't
trying to mix configuration via socket-binding refs and configuration via direct
specification of interface+port. It's not disallowing configuring socket-binding refs
for both HTTP and HTTPS.
I see the failure message isn't properly internationalized though.
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:17 p.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Brian Stansberry commented on AS7-3322:
---------------------------------------
The failure message is fixed.
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:40 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse resolved AS7-3322.
-----------------------------------
Resolution: Done
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:40 a.m.
[
https://issues.jboss.org/browse/AS7-3322?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse commented on AS7-3322:
---------------------------------------
In that case this issue can be resolved - the check was just to make sure end users were
not forced to switch from one config style to the other just to enable SSL on the HTTP
interface.
Need to review how the SSL port is specified for the HTTP management
interface.
-------------------------------------------------------------------------------
Key: AS7-3322
URL: https://issues.jboss.org/browse/AS7-3322
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 7.1.0.Final
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4636
days inactive
4647
days old
12 comments
3 participants
participants (3)
-
Brian Stansberry (JIRA) -
Darran Lofthouse (JIRA)
-
Tomaz Cerar (JIRA)