[jboss-dev-forums] [JMX Development] - Securing JMXConnector (RMI) via SSL

[hmr_mueller]

hmr_mueller [http://community.jboss.org/people/hmr_mueller] created the discussion

"Securing JMXConnector (RMI) via SSL"

To view the discussion, visit: http://community.jboss.org/message/568997#568997

--------------------------------------------------------------
In JBoss 6 M4 the JMXConnector defined in jmx-jboss-beans.xml (org.jboss.system.server.jmx.JMXConnector) does not allow to use SSL although this can be done with standard Java JMX over RMI classes. The SocketFactories are hard coded:

         DefaultClientSocketFactory clientSocketFactory = new DefaultClientSocketFactory();
         clientSocketFactory.setBindAddress(hostname);
         DefaultSocketFactory serverSocketFactory = new DefaultSocketFactory();
         serverSocketFactory.setBindAddress(hostname);
         registry = LocateRegistry.createRegistry(rmiRegistryPort, clientSocketFactory, serverSocketFactory);

Since credentials and other sensitive data are sent over the wire, using SSL should be possible without writing your own JMXConnector.

Thanks, Harald
--------------------------------------------------------------

Reply to this message by going to Community
[http://community.jboss.org/message/568997#568997]

Start a new discussion in JMX Development at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2105]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20101029/8338adc4/attachment.html