[jboss-as7-dev] EAP6 Domain HTTPS/SSL - Info on Architectural Decision

[Brian Stansberry]

The answer to why it's not supported is we didn't think about it and 
AFAIK it never came up as an issue during community bake.

Oddly enough Jess Sightler and I were chatting about it last week, 
there's an issue filed to support this, and Jess has started on it.

https://issues.jboss.org/browse/AS7-6964

On 4/23/13 11:57 AM, Kevin Franklin wrote:
> The core engineering list suggested I post my question to the jboss as7 dev list.
>
> We would like EAP 6 to support
>   - Domain Mode
>   - SSL certs unique to each host/server
>        - The SSL certs must have unique passwords
>        - The unique passwords must be encrypted or vaulted
>
> The only solution that has been thought of would be recursive parsing of property substitution. Currently this is not supported (i.e. I can not input ./domain.sh -Dfull.web.https.password="$VAULT.web.https.password=fdsa8ds7g324qtnk43").
>
> What was the logic behind the decision not to support unique certs and recursive parsing? I need to pass this along to the customer since it will require a major change in architecture.
>
> Thank you for your time and consideration in the matter,
>
> Regards,
> Kevin Franklin
> Red Hat Consulting
> kevin.j.franklin at redhat.com
> 703.953.4455
>
> _______________________________________________
> jboss-as7-dev mailing list
> jboss-as7-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/jboss-as7-dev
>


-- 
Brian Stansberry
Principal Software Engineer
JBoss by Red Hat