[jboss-jira] [JBoss JIRA] (WFLY-2951) Enable alternative provider to be specified for loading key and trust stores.

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-2951?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12946768#comment-12946768 ] 

Darran Lofthouse commented on WFLY-2951:
----------------------------------------

Just one comment for attempts to set this up, error message like the following can mean invalid provider configuration at the JVM level - i.e. initialisation failed so the provider was not registered: -

{code}
10:31:30,525 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-5) MSC000001: Failed to start service jboss.server.controller.management.security_realm.ManagementRealm.trust-manager: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.ManagementRealm.trust-manager: JBAS015229: Unable to start service
	at org.jboss.as.domain.management.security.ProviderTrustManagerService.start(ProviderTrustManagerService.java:63)
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811) [jboss-msc-1.0.4.GA-redhat-1.jar:1.0.4.GA-redhat-1]
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746) [jboss-msc-1.0.4.GA-redhat-1.jar:1.0.4.GA-redhat-1]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_45]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_45]
	at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]
Caused by: java.security.KeyStoreException: PKCS11-ServerKeyStore not found
	at java.security.KeyStore.getInstance(KeyStore.java:616) [rt.jar:1.7.0_45]
	at org.jboss.as.domain.management.security.ProviderTrustManagerService.start(ProviderTrustManagerService.java:58)
	... 5 more
Caused by: java.security.NoSuchAlgorithmException: PKCS11-ServerKeyStore KeyStore not available
	at sun.security.jca.GetInstance.getInstance(GetInstance.java:159) [rt.jar:1.7.0_45]
	at java.security.Security.getImpl(Security.java:695) [rt.jar:1.7.0_45]
	at java.security.KeyStore.getInstance(KeyStore.java:613) [rt.jar:1.7.0_45]
	... 6 more
{code}
                
> Enable alternative provider to be specified for loading key and trust stores.
> -----------------------------------------------------------------------------
>
>                 Key: WFLY-2951
>                 URL: https://issues.jboss.org/browse/WFLY-2951
>             Project: WildFly
>          Issue Type: Sub-task
>      Security Level: Public(Everyone can see) 
>          Components: Domain Management, Security
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: 9.0.0.CR1
>
>
> This is to allow pre-defined PKCS#11 providers to be referenced.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira