CLI can't connect to DC on native port without defined remote protocol ---------------------------------------------------------------------- Key: WFCORE-2342 URL: https://issues.jboss.org/browse/WFCORE-2342 Project: WildFly Core Issue Type: Bug Components: CLI, Remoting, Security Reporter: Ken Wills Assignee: Ken Wills Priority: Blocker Labels: cli, regression, remoting, ssl Fix For: 3.0.0.Beta7 CLI is able to connect to DC to native port (9999) only when protocol _remote_ is specified. It is regression, EAP 7.0.0.GA is able to connect when no protocol is defined or with _remoting_ and _remote_ (maybe some others). EAP 7.0.0.GA {noformat} msimka@msimka-t450:/tmp/GA/jboss-eap-7.0$ ./bin/jboss-cli.sh -c --controller=127.0.0.1:9999 [domain@127.0.0.1:9999 /] quit msimka@msimka-t450:/tmp/GA/jboss-eap-7.0$ ./bin/jboss-cli.sh -c --controller=remoting://127.0.0.1:9999 [domain@127.0.0.1:9999 /] quit msimka@msimka-t450:/tmp/GA/jboss-eap-7.0$ ./bin/jboss-cli.sh -c --controller=remote://127.0.0.1:9999 [domain@127.0.0.1:9999 /] quit {noformat} EAP 7.1.0.DR12 {noformat} msimka@msimka-t450:/tmp/jboss-eap-7.1$ ./bin/jboss-cli.sh -c --controller=127.0.0.1:9999 Failed to connect to the controller: Unable to negotiate SSL connection with controller at 127.0.0.1:9999 msimka@msimka-t450:/tmp/jboss-eap-7.1$ ./bin/jboss-cli.sh -c --controller=remoting://127.0.0.1:9999 Failed to connect to the controller: Unable to negotiate SSL connection with controller at 127.0.0.1:9999 msimka@msimka-t450:/tmp/jboss-eap-7.1$ ./bin/jboss-cli.sh -c --controller=remote://127.0.0.1:9999 [domain@127.0.0.1:9999 /] quit {noformat} Stacktrace from attached jboss-cli.log {noformat} 15:46:26,184 TRACE [org.jboss.remoting.remote.connection] Connection error detail: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection? at sun.security.ssl.EngineInputRecord.bytesInCompletePacket(EngineInputRecord.java:156) at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:868) at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781) at org.xnio.ssl.JsseStreamConduit.performIO(JsseStreamConduit.java:1364) at org.xnio.ssl.JsseStreamConduit.read(JsseStreamConduit.java:991) at org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:123) at org.jboss.remoting3.remote.MessageReader.getMessage(MessageReader.java:131) at org.jboss.remoting3.remote.ClientConnectionOpenListener$Greeting.handleEvent(ClientConnectionOpenListener.java:165) at org.jboss.remoting3.remote.ClientConnectionOpenListener$Greeting.handleEvent(ClientConnectionOpenListener.java:160) at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92) at org.xnio.conduits.ReadReadyHandler$ChannelListenerHandler.readReady(ReadReadyHandler.java:66) at org.xnio.ssl.JsseStreamConduit.run(JsseStreamConduit.java:446) at org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:588) at org.xnio.nio.WorkerThread.run(WorkerThread.java:468) {noformat}