[jboss-jira] [JBoss JIRA] (WFLY-1598) Out of the box SSL - or shortly after.

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-1598?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12945557#comment-12945557 ] 

Darran Lofthouse commented on WFLY-1598:
----------------------------------------

Providing the common handling of SSLContexts may be the best time to provide additional capabilities to this single approach to SSLContexts to also manage new keys and certificates.
                
> Out of the box SSL - or shortly after.
> --------------------------------------
>
>                 Key: WFLY-1598
>                 URL: https://issues.jboss.org/browse/WFLY-1598
>             Project: WildFly
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Domain Management, Security
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>            Priority: Critical
>              Labels: management_security,, management_sso
>             Fix For: 9.0.0.CR1
>
>
> There are various reasons that we do not support SSL/TLS out of the box e.g.
>  - If we ship a default keystore then everyone has access to the private key.
>  - Generating one on first boot we do not have sufficient information to generate it correctly, also the performance overhead.
> This issue is to explorer other options to encourage their use and make it easier to configure.
> As an example could the admin console detect a non encrypted connection and have an box that encourages the config along with a wizard like workflow to get it set up?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira