Migrate connector configuration to JBos AS 7

[valsaraj007]

Hi,

We are using the following connector configurations in JBoss AS 6:

<Connector protocol="HTTP/1.1" port="${jboss.web.http.port}" address="${jboss.bind.address}" redirectPort="${jboss.web.https.port}" />

<Connector protocol="AJP/1.3" port="${jboss.web.ajp.port}" address="${jboss.bind.address}" redirectPort="${jboss.web.https.port}" />

<Connector SSLEnabled="true" address="${jboss.bind.address}" clientAuth="false" keystoreFile="D:/jboss-6.0.0.Final/server/app/conf/app-webserver.p12" keystorePass="tolven" keystoreType="pkcs12" maxThreads="250" port="${jboss.web.https.port}" protocol="HTTP/1.1" scheme="https" secure="true" sslProtocol="TLS"/>

It is replaced in Jboss AS 7 as:

<connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http" port="${jboss.web.http.port}" address="${jboss.bind.address}" redirectPort="${jboss.web.https.port}" />

<connector name="ajp" protocol="AJP/1.3" scheme="https" socket-binding="ajp" port="${jboss.web.ajp.port}" address="${jboss.bind.address}" redirectPort="${jboss.web.https.port}" />

<connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" SSLEnabled="true" address="${jboss.bind.address}" clientAuth="false" keystoreFile="D:/jboss-7.1.1.Final/standalone/configuration/app-webserver.p12" keystorePass="tolven" keystoreType="pkcs12" maxThreads="250" port="${jboss.web.https.port}" secure="true" sslProtocol="TLS" />

Is this correct?    

[valsaraj007]

The server thrown ParseException for following attributes when started JBoss AS 7:

port, address, redirectPort, SSLEnabled, clientAuth, keystoreFile, keystorePass, keystoreType, maxThreads and sslProtocol.

So I removed these to start JBoss without error.

redirectPort is replaced with redirect-port and set the port number directly as ${jboss.web.https.port} didn't work.

How can we replace these in JBoss AS 7?

[jaysensharma]

Following are the alternatives of AS6 attributes you mentioned for  AS7

clientAuth (AS6)

(AS7) "verify-client" =>  "Enable client certificate verification."

keystoreType (AS6)

(AS7) "keystore-type" =>  "Type of the keystore, There are various types of keystores available, including PKCS12 and Sun's JKS."

(AS7) "ca-certificate-password" => "description" => "CA Certificate password."

keystorePass (AS6)

(AS7) "password" => "Keystore Password."

keystoreFile (AS6)

(AS7) "certificate-key-file" => "Key file for the certificate."
If you have certificate file then you can use:
(AS7) "certificate-file" => "Server certificate file."

sslProtocol (AS6)

(AS7) "protocol" => "The SSL protocols that are enabled."

port, address (AS6)

(AS7) "socket-binding" =>  "The web connector socket-binding reference, this connector should be bound to."

Example:

========

            <connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" secure="true">
                <ssl name="ssl" key-alias="chapter8" password="rmi+ssl" certificate-key-file="${jboss.server.config.dir}/chap8.keystore" protocol="TLSv1" verify-client="false" certificate-file="${jboss.server.config.dir}/chap8.keystore"/>
            </connector>

For maxThread setting you will need to configure the Thread Pool Executor  inside the "threading" subsystem and then you can define it for your connector using the "executor" attribute. In order to know more about the Executors refer to [1]

   <subsystemxmlns="urn:jboss:domain:threads:1.0">
    <bounded-queue-thread-pool name="http-executor"
        blocking="true">
        <core-threads count="10" per-cpu="20" />
        <queue-length count="10" per-cpu="20" />
        <max-threads count="10" per-cpu="20" />
        <keepalive-time time="10" unit="seconds" />
    </bounded-queue-thread-pool>
</subsystem>

[1] http://www.mastertheboss.com/jboss-server/jboss-performance/jboss-as-7-performance-tuning?start=3

[valsaraj007]

Thanks much!

It worked

<connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" secure="true">

      <ssl protocol="TLSv1" verify-client="false" keystore-type="PKCS12" password="**********" certificate-key-file="${jboss.server.config.dir}/app-webserver.p12"/>

      </connector>