[jboss-jira] [JBoss JIRA] (WFCORE-2832) JBoss CLI run with IBM JDK is not able to use secure connection when server uses Elytron ssl-context

Jean-Francois Denise (JIRA) issues at jboss.org
Thu May 18 12:38:00 EDT 2017


     [ https://issues.jboss.org/browse/WFCORE-2832?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jean-Francois Denise moved WFLY-8800 to WFCORE-2832:
----------------------------------------------------

        Project: WildFly Core  (was: WildFly)
            Key: WFCORE-2832  (was: WFLY-8800)
    Component/s: CLI
                 Security
                     (was: CLI)
                     (was: Security)


> JBoss CLI run with IBM JDK is not able to use secure connection when server uses Elytron ssl-context
> ----------------------------------------------------------------------------------------------------
>
>                 Key: WFCORE-2832
>                 URL: https://issues.jboss.org/browse/WFCORE-2832
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: CLI, Security
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>            Priority: Blocker
>
> In case SSL through Elytron ssl-context is configured for management interface then JBoss CLI is not able to authenticate when it is run with IBM JDK.
> It works correctly when 
> * Legacy SSL is used instead of Elytron ssl-context 
> * or non-IBM JDK is used for JBoss CLI
> * or only authentication without SSL is used
> It fails for http-interface as well as native-interface.
> When different client is used for connection to management interface (I tried it with ModelControllerClient) then authentication and SSL works correctly.
> For http-interface following output of CLI is print:
> {code}
> Failed to connect to the controller: The controller is not available at localhost:9993: java.net.ConnectException: WFLYPRT0053: Could not connect to remote+https://localhost:9993. The connection failed: WFLYPRT0053: Could not connect to remote+https://localhost:9993. The connection failed: java.nio.channels.ClosedChannelException
> {code}
> For native-interface following output of CLI is print:
> {code}
> Failed to connect to the controller: Unable to negotiate SSL connection with controller at localhost:9999
> {code}



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list