5:24 a.m.
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Bug
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Remy Maucherat
Fix For: 7.0.2.Final
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:41 a.m.
New subject: [JBoss JIRA] Commented: (AS7-1680) HTTP connector using JSSE ignores custom truststore file
[
https://issues.jboss.org/browse/AS7-1680?page=com.atlassian.jira.plugin.s...
]
Remy Maucherat commented on AS7-1680:
-------------------------------------
It is normal, truststore config is relatively specific, and is supposed to use the system
properties of the connector. There are four properties:
javax.net.ssl.trustStore/trustStorePassword/etc.
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Bug
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Remy Maucherat
Fix For: 7.0.2.Final
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:04 a.m.
New subject: [JBoss JIRA] Commented: (AS7-1680) HTTP connector using JSSE ignores custom truststore file
[
https://issues.jboss.org/browse/AS7-1680?page=com.atlassian.jira.plugin.s...
]
Fabrizio Benedetti commented on AS7-1680:
-----------------------------------------
Ok, but the ssl system properties are considered from java also for http client side
connection. Keeping the two configurations distincts (client side and server side) can be
usefull in many scenarios. Jboss 6.x connector gives priority to
"truststoreFile" (in server.xml) and then to javax.net.ssl.trustStore.
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Bug
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Remy Maucherat
Fix For: 7.0.2.Final
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:02 a.m.
New subject: [JBoss JIRA] Updated: (AS7-1680) HTTP connector using JSSE ignores custom truststore file
[
https://issues.jboss.org/browse/AS7-1680?page=com.atlassian.jira.plugin.s...
]
Remy Maucherat updated AS7-1680:
--------------------------------
Issue Type: Feature Request (was: Bug)
Fix Version/s: (was: 7.0.2.Final)
Priority: Minor (was: Major)
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Feature Request
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Remy Maucherat
Priority: Minor
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:40 a.m.
New subject: [JBoss JIRA] (AS7-1680) HTTP connector using JSSE ignores custom truststore file
[
https://issues.jboss.org/browse/AS7-1680?page=com.atlassian.jira.plugin.s...
]
Tomaz Cerar reassigned AS7-1680:
--------------------------------
Assignee: Tomaz Cerar (was: Remy Maucherat)
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Feature Request
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Tomaz Cerar
Priority: Minor
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:04 a.m.
New subject: [JBoss JIRA] (AS7-1680) HTTP connector using JSSE ignores custom truststore file
[
https://issues.jboss.org/browse/AS7-1680?page=com.atlassian.jira.plugin.s...
]
Tomaz Cerar updated AS7-1680:
-----------------------------
Git Pull Request: https://github.com/jbossas/jboss-as/pull/591
My fix enables configuring custom truststore, seperate password for truststore and
provides option for defining key/trust store type that can be pksc12 or jks
example of configuration:
{noformat}
<ssl password="changeit" key-alias="tomcat"
certificate-key-file="/path/to/keystore.p12"
verify-client="true"
ca-certificate-file="/path/to/truststore.jks"
ca-certificate-password="changeit"
keystore-type="PKCS12" truststore-type="JKS"
/>
{noformat}
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Feature Request
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Tomaz Cerar
Priority: Minor
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5:25 a.m.
New subject: [JBoss JIRA] (AS7-1680) HTTP connector using JSSE ignores custom truststore file
[
https://issues.jboss.org/browse/AS7-1680?page=com.atlassian.jira.plugin.s...
]
Tomaz Cerar resolved AS7-1680.
------------------------------
Fix Version/s: 7.1.0.Beta1
7.1.0.CR1
Resolution: Done
pull request was merged by Jason
HTTP connector using JSSE ignores custom truststore file
--------------------------------------------------------
Key: AS7-1680
URL: https://issues.jboss.org/browse/AS7-1680
Project: Application Server 7
Issue Type: Feature Request
Components: Web
Affects Versions: 7.0.1.Final
Reporter: Fabrizio Benedetti
Assignee: Tomaz Cerar
Priority: Minor
Fix For: 7.1.0.Beta1, 7.1.0.CR1
Original Estimate: 30 minutes
Remaining Estimate: 30 minutes
HTTP connector with JSSE configuration and client authentication set to "true"
or "want" ignores the attribute "ca-certificate-file" and loads the
CAs only from standard JAVA truststore ($JAVA_HOME/jre/lib/security/cacerts).
Class org.jboss.as.web.WebConnectorService in the section JSSE configuration (row 185)
does not set the correct attribute "truststoreFile" in the connector protocol
handler.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4711
days inactive
4783
days old
6 comments
5 participants
participants (5)
-
Fabrizio Benedetti (JIRA) -
Remy Maucherat (JIRA)
-
Tomaz Cerar (Assigned) (JIRA)
-
Tomaz Cerar (Resolved) (JIRA)
-
Tomaz Cerar (Updated) (JIRA)