[jboss-jira] [JBoss JIRA] (AS7-5134) Unable to not set key-alias for ssl
Brian Stansberry (JIRA)
jira-events at lists.jboss.org
Tue Aug 14 18:00:17 EDT 2012
[ https://issues.jboss.org/browse/AS7-5134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12711583#comment-12711583 ]
Brian Stansberry commented on AS7-5134:
---------------------------------------
If your configuration file uses the 1.0 or 1.1 xsd schema for the web subsystem and doesn't specify a key-alias, EAP will manually add "jboss" as the key-alias. When the configuration persists following any subsequent change, the schema version of the subsystem will be changed to 1.2 but key-alias="jboss" will be written to the file. If the configuration file uses the 1.2 schema version and doesn't specify a key-alias, no key alias will be used.
This behavior preserves compatibility with previous releases (an old config will not suddenly have a change in behavior when an upgrade to 7.2 is done) while providing the desired behavior going forward.
> Unable to not set key-alias for ssl
> -----------------------------------
>
> Key: AS7-5134
> URL: https://issues.jboss.org/browse/AS7-5134
> Project: Application Server 7
> Issue Type: Enhancement
> Components: Web
> Affects Versions: 7.1.2.Final (EAP)
> Reporter: Tomaz Cerar
> Assignee: Tomaz Cerar
> Fix For: 7.1.3.Final (EAP), 7.2.0.Alpha1
>
>
> when running in FIPS mode key-alias should not be set as this triggers exception as non FIPS complaint key managers are used.
> as key-alias has default value of 'jboss' it will always get set even if user does not define it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list