[jboss-jira] [JBoss JIRA] (WFLY-7091) Not able to configure list of key/trust managers on elytron ssl context.

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-7091?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13291684#comment-13291684 ] 

Darran Lofthouse commented on WFLY-7091:
----------------------------------------

The references capability is of multiple key-managers and trust managers: -

https://developer.jboss.org/wiki/WildFlySecurityElytron-CapabilitiesAndRequirements-Reference

Although the API is about having an array with multiple 'Managers' the reality is this always tends to be an array of length 1 containing just an X.509 manager.  If aggregation is ever justified instead of supporting the list here I think I would add aggregate-key/trust-manager resources which is a similar pattern to how other components are currently aggregated,

> Not able to configure list of key/trust managers on elytron ssl context.
> ------------------------------------------------------------------------
>
>                 Key: WFLY-7091
>                 URL: https://issues.jboss.org/browse/WFLY-7091
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Martin Choma
>            Assignee: Darran Lofthouse
>
> Base on xsd/model documentation key-managers and trust-managers attributes seems to be meant to hold list of managers. That also comply to SSLContext init() method [1]. Hovewer, in elytron subsystem, they are of type string and any my tries to set list (space/comma delimited list) failed. 
> XSD documentation
> * key-managers - Reference to the KeyManagers to be used by this SSLContext.
> * trust-managers  - Reference to the TrustManagers to be used by this SSLContext.
> Model description:
> {noformat}
> "key-managers" => {
>     "type" => STRING,
>     "description" => "Reference to the key managers to use within the SSLContext.",
>     "expressions-allowed" => false,
>     "nillable" => true,
>     "capability-reference" => "org.wildfly.security.key-managers",
>     "min-length" => 1L,
>     "max-length" => 2147483647L,
>     "access-type" => "read-write",
>     "storage" => "configuration",
>     "restart-required" => "resource-services"
> },
> "trust-managers" => {
>     "type" => STRING,
>     "description" => "Reference to the trust managers to use within the SSLContext.",
>     "expressions-allowed" => false,
>     "nillable" => true,
>     "capability-reference" => "org.wildfly.security.trust-managers",
>     "min-length" => 1L,
>     "max-length" => 2147483647L,
>     "access-type" => "read-write",
>     "storage" => "configuration",
>     "restart-required" => "resource-services"
> },
> {noformat}
> [1] https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLContext.html#init-javax.net.ssl.KeyManager:A-javax.net.ssl.TrustManager:A-java.security.SecureRandom-



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)