4 Replies Latest reply on Apr 10, 2016 1:54 PM by galaxyeleven

SSL on jboss 6.3 eap clustered

kerberos5 Apr 5, 2016 5:37 AM

Hi at all, i have a problem to configure ssl into jboss 6.3 eap clustered with 2 istances

i have generate my self-cert

set PATH=C:\Program Files\Java\%JAVA_HOME%\bin;%PATH%

keytool -genkeypair -alias cciss -keyalg RSA -keystore cciss.keystore -validity 365

Now i have customize my C:\as\server1\domain\configuration\domain.xml...

<subsystem xmlns="urn:jboss:domain:web:2.1" default-virtual-server="default-host" native="false">

<connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http" redirect-port="8443"/>

<connector name="https" scheme="https" protocol="HTTP/1.1" socket-binding="https" enable-lookups="false" secure="true">

<ssl name="cciss-ssl"

password="123456"

protocol="TLSv1"

key-alias="cciss"

certificate-key-file="${jboss.server.config.dir}/cciss.keystore"

certificate-file="${jboss.server.config.dir}/cciss.keystore"/>

</connector>

<virtual-server name="default-host" enable-welcome-root="true">

<alias name="server-one"/>

<alias name="cciss.mctc.local"/>

</virtual-server>

</subsystem>

i deploy a war demo into my jboss but it not work

web.xml

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">

   <distributable/>

        <security-constraint>

         <web-resource-collection>

        <web-resource-name>SSLDemo</web-resource-name>

        <url-pattern>/*</url-pattern>

    </web-resource-collection>

    <user-data-constraint>

        <transport-guarantee>CONFIDENTIAL</transport-guarantee>

    </user-data-constraint>

    </security-constraint>

<display-name>SSLDemo</display-name>

<welcome-file-list>

    <welcome-file>index.html</welcome-file>

    <welcome-file>index.htm</welcome-file>

    <welcome-file>index.jsp</welcome-file>

    <welcome-file>default.html</welcome-file>

    <welcome-file>default.htm</welcome-file>

    <welcome-file>default.jsp</welcome-file>

</welcome-file-list>

</web-app>

When calling the url http://192.168.50.79:8181/SSLDemo it switch correctly in https://192.168.50.79:8443/SSLDemo but it says it can not establish communication

because?

thanks

1. Re: SSL on jboss 6.3 eap clustered

kerberos5 Apr 5, 2016 6:07 AM (in response to kerberos5)

in the log are not present exceptions:

Pool -- 30) JBAS010153: Node identifier property is set to the default value. Pl

ease make sure it is unique.

[Server:server-one] 11:32:06,036 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 47) JBAS010280: Activating Infinispan subsystem.

[Server:server-one] 11:32:06,074 INFO [org.jboss.as.naming] (ServerService Thre

ad Pool -- 37) JBAS011800: Activating Naming Subsystem

[Server:server-one] 11:32:06,080 INFO [org.jboss.as.security] (ServerService Th

read Pool -- 32) JBAS013171: Activating Security Subsystem

[Server:server-one] 11:32:06,211 INFO [org.jboss.as.webservices] (ServerService

Thread Pool -- 25) JBAS015537: Activating WebServices Extension

[Server:server-one] 11:32:06,215 INFO [org.jboss.as.configadmin] (ServerService

Thread Pool -- 51) JBAS016200: Activating ConfigAdmin Subsystem

[Server:server-one] 11:32:06,203 INFO [org.jboss.as.jsf] (ServerService Thread

Pool -- 40) JBAS012605: Activated the following JSF Implementations: [main, 1.2]

[Server:server-one] 11:32:06,249 INFO [org.jboss.as.naming] (MSC service thread

1-4) JBAS011802: Starting Naming Service

[Server:server-one] 11:32:06,255 INFO [org.jboss.as.clustering.jgroups] (Server

Service Thread Pool -- 43) JBAS010260: Activating JGroups subsystem.

[Server:server-one] 11:32:06,316 INFO [org.jboss.as.security] (MSC service thre

ad 1-1) JBAS013170: Current PicketBox version=4.0.19.SP8-redhat-1

[Server:server-one] 11:32:07,340 INFO [org.jboss.as.connector.subsystems.dataso

urces] (ServerService Thread Pool -- 50) JBAS010403: Deploying JDBC-compliant dr

iver class oracle.jdbc.OracleDriver (version 11.2)

[Server:server-one] 11:32:08,034 INFO [org.jboss.as.mail.extension] (MSC servic

e thread 1-2) JBAS015400: Bound mail session [java:jboss/mail/Default]

[Server:server-one] 11:32:08,324 INFO [org.jboss.as.connector.logging] (MSC ser

vice thread 1-4) JBAS010408: Starting JCA Subsystem (IronJacamar 1.0.26.Final-re

dhat-1)

[Server:server-one] 11:32:08,424 INFO [org.jboss.as.connector.subsystems.dataso

urces] (ServerService Thread Pool -- 50) JBAS010403: Deploying JDBC-compliant dr

iver class oracle.jdbc.OracleDriver (version 11.2)

[Server:server-one] 11:32:09,244 INFO [org.jboss.as.connector.subsystems.dataso

urces] (MSC service thread 1-1) JBAS010400: Bound data source [java:/jdbc/DL_PDB

_Pool]

[Server:server-one] 11:32:10,327 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (ServerService Thread Pool -- 47) ISPN000152: Passivati

on configured without an eviction policy being selected. Only manually evicted e

ntities will be passivated.

[Server:server-one] 11:32:10,355 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (ServerService Thread Pool -- 47) ISPN000152: Passivati

on configured without an eviction policy being selected. Only manually evicted e

ntities will be passivated.

[Server:server-one] 11:32:10,864 INFO [org.apache.coyote.http11.Http11Protocol]

(MSC service thread 1-1) JBWEB003001: Coyote HTTP/1.1 initializing on : http-/1

92.168.50.79:8188

[Server:server-one] 11:32:11,038 INFO [org.apache.coyote.http11.Http11Protocol]

(MSC service thread 1-1) JBWEB003000: Coyote HTTP/1.1 starting on: http-/192.16

8.50.79:8188

[Server:server-one] 11:32:11,122 INFO [org.apache.coyote.ajp] (MSC service thre

ad 1-2) JBWEB003046: Starting Coyote AJP/1.3 on ajp-/192.168.50.79:8109

[Server:server-one] 11:32:11,844 INFO [org.apache.coyote.http11.Http11Protocol]

(MSC service thread 1-3) JBWEB003001: Coyote HTTP/1.1 initializing on : http-/1

92.168.50.79:8543

[Server:server-one] 11:32:11,854 INFO [org.apache.coyote.http11.Http11Protocol]

(MSC service thread 1-3) JBWEB003000: Coyote HTTP/1.1 starting on: http-/192.16

8.50.79:8543

[Server:server-one] 11:32:11,893 INFO [org.jboss.modcluster] (ServerService Thr

ead Pool -- 52) MODCLUSTER000001: Initializing mod_cluster version 1.2.9.Final-r

edhat-1

[Server:server-one] 11:32:11,960 INFO [org.jboss.modcluster] (ServerService Thr

ead Pool -- 52) MODCLUSTER000032: Listening to proxy advertisements on /224.0.1.

105:23364

[Server:server-one] 11:32:12,153 INFO [org.jboss.as.server.deployment] (MSC ser

vice thread 1-3) JBAS015876: Starting deployment of "eclipselink.war" (runtime-n

ame: "eclipselink.war")

[Server:server-one] 11:32:12,161 INFO [org.jboss.as.server.deployment] (MSC ser

vice thread 1-3) JBAS015876: Starting deployment of "myCluster.war" (runtime-nam

e: "myCluster.war")

[Server:server-one] 11:32:12,165 INFO [org.jboss.as.server.deployment] (MSC ser

vice thread 1-3) JBAS015876: Starting deployment of "hibernate.war" (runtime-nam

e: "hibernate.war")

[Server:server-one] 11:32:12,168 INFO [org.jboss.as.server.deployment] (MSC ser

vice thread 1-3) JBAS015876: Starting deployment of "AccessoLDAP.war" (runtime-n

ame: "AccessoLDAP.war")

[Server:server-one] 11:32:12,201 INFO [org.jboss.as.remoting] (MSC service thre

ad 1-2) JBAS017100: Listening on 192.168.50.79:4547

[Server:server-one] 11:32:12,992 INFO [org.jboss.ws.common.management] (MSC ser

vice thread 1-4) JBWS022052: Starting JBoss Web Services - Stack CXF Server 4.3.

0.Final-redhat-3

[Server:server-one] 11:32:13,517 INFO [org.jboss.as.jpa] (MSC service thread 1-

1) JBAS011401: Read persistence.xml for eclipselink

[Server:server-one] 11:32:15,245 INFO [org.jboss.as.connector.subsystems.dataso

urces] (MSC service thread 1-3) JBAS010400: Bound data source [java:/jdbc/oracle

_ol]

[Server:server-one] 11:32:15,248 INFO [org.jboss.as.connector.subsystems.dataso

urces] (MSC service thread 1-3) JBAS010400: Bound data source [java:/jdbc/oracle

_dw]

[Server:server-one] 11:32:15,347 INFO [org.jboss.as.connector.subsystems.dataso

urces] (MSC service thread 1-2) JBAS010400: Bound data source [java:/jdbc/DL_DSB

_OL_Pool]

[Server:server-one] 11:32:15,557 INFO [org.jboss.as.jpa] (ServerService Thread

Pool -- 52) JBAS011402: Starting Persistence Unit Service 'eclipselink.war#eclip

selink'

[Server:server-one] 11:32:15,959 INFO [org.jboss.as.jpa] (MSC service thread 1-

3) JBAS011401: Read persistence.xml for hibernate

[Server:server-one] 11:32:18,197 INFO [org.jboss.as.jpa] (ServerService Thread

Pool -- 53) JBAS011402: Starting Persistence Unit Service 'hibernate.war#hiberna

te'

[Server:server-one] 11:32:21,316 INFO [org.hibernate.annotations.common.Version

] (ServerService Thread Pool -- 53) HCANN000001: Hibernate Commons Annotations {

4.0.1.Final-redhat-2}

[Server:server-one] 11:32:21,377 INFO [org.hibernate.Version] (ServerService Th

read Pool -- 53) HHH000412: Hibernate Core {4.2.14.SP1-redhat-1}

[Server:server-one] 11:32:21,385 INFO [org.hibernate.cfg.Environment] (ServerSe

rvice Thread Pool -- 53) HHH000206: hibernate.properties not found

[Server:server-one] 11:32:21,392 INFO [org.hibernate.cfg.Environment] (ServerSe

rvice Thread Pool -- 53) HHH000021: Bytecode provider name : javassist

[Server:server-one] 11:32:21,644 INFO [org.hibernate.ejb.Ejb3Configuration] (Se

rverService Thread Pool -- 53) HHH000204: Processing PersistenceUnitInfo [

[Server:server-one] name: hibernate

[Server:server-one] ...]

[Server:server-one] 11:32:22,059 INFO [org.hibernate.service.jdbc.connections.i

nternal.ConnectionProviderInitiator] (ServerService Thread Pool -- 53) HHH000130

: Instantiating explicit connection provider: org.hibernate.ejb.connection.Injec

tedDataSourceConnectionProvider

[Server:server-one] 11:32:23,953 INFO [org.hibernate.dialect.Dialect] (ServerSe

rvice Thread Pool -- 53) HHH000400: Using dialect: org.hibernate.dialect.HSQLDia

lect

[Server:server-one] 11:32:24,760 INFO [org.hibernate.engine.transaction.interna

l.TransactionFactoryInitiator] (ServerService Thread Pool -- 53) HHH000268: Tran

saction strategy: org.hibernate.engine.transaction.internal.jta.CMTTransactionFa

ctory

[Server:server-one] 11:32:24,797 INFO [org.hibernate.hql.internal.ast.ASTQueryT

ranslatorFactory] (ServerService Thread Pool -- 53) HHH000397: Using ASTQueryTra

nslatorFactory

[Server:server-one] 11:32:24,821 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (ServerService Thread Pool -- 55) ISPN000152: Passivati

on configured without an eviction policy being selected. Only manually evicted e

ntities will be passivated.

[Server:server-one] 11:32:24,852 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (ServerService Thread Pool -- 57) ISPN000152: Passivati

on configured without an eviction policy being selected. Only manually evicted e

ntities will be passivated.

[Server:server-one] 11:32:24,911 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (ServerService Thread Pool -- 57) ISPN000152: Passivati

on configured without an eviction policy being selected. Only manually evicted e

ntities will be passivated.

[Server:server-one] 11:32:24,918 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (ServerService Thread Pool -- 55) ISPN000152: Passivati

on configured without an eviction policy being selected. Only manually evicted e

ntities will be passivated.

[Server:server-one] 11:32:24,926 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-2) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,931 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-3) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,931 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-4) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,933 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-4) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,935 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-4) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,936 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-4) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,939 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-3) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:24,937 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-2) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:32:25,423 INFO [org.infinispan.remoting.transport.jgroup

s.JGroupsTransport] (ServerService Thread Pool -- 54) ISPN000078: Starting JGrou

ps Channel

[Server:server-one] 11:32:25,583 INFO [stdout] (ServerService Thread Pool -- 54

)

[Server:server-one] 11:32:25,585 INFO [stdout] (ServerService Thread Pool -- 54

) -------------------------------------------------------------------

[Server:server-one] 11:32:25,585 INFO [stdout] (ServerService Thread Pool -- 54

) GMS: address=master:server-one/web, cluster=web, physical address=192.168.50.7

9:55300

[Server:server-one] 11:32:25,585 INFO [stdout] (ServerService Thread Pool -- 54

) -------------------------------------------------------------------

[Server:server-one]

[Server:server-one] 11:32:26,111 INFO [org.hibernate.tool.hbm2ddl.SchemaExport]

(ServerService Thread Pool -- 53) HHH000227: Running hbm2ddl schema export

[Server:server-one] 11:32:26,135 INFO [org.hibernate.tool.hbm2ddl.SchemaExport]

(ServerService Thread Pool -- 53) HHH000230: Schema export complete

[Server:server-one] 11:32:27,697 INFO [org.infinispan.remoting.transport.jgroup

s.JGroupsTransport] (ServerService Thread Pool -- 54) ISPN000094: Received new c

luster view: [master:server-one/web|0] [master:server-one/web]

[Server:server-one] 11:32:27,700 INFO [org.infinispan.remoting.transport.jgroup

s.JGroupsTransport] (ServerService Thread Pool -- 54) ISPN000079: Cache local ad

dress is master:server-one/web, physical addresses are [192.168.50.79:55300]

[Server:server-one] 11:32:27,708 INFO [org.infinispan.factories.GlobalComponent

Registry] (ServerService Thread Pool -- 54) ISPN000128: Infinispan version: Infi

nispan 'Delirium' 5.2.10.Final

[Server:server-one] 11:32:27,741 INFO [org.jboss.as.clustering] (MSC service th

read 1-1) JBAS010238: Number of cluster members: 1

[Server:server-one] 11:32:27,898 INFO [org.infinispan.factories.TransactionMana

gerFactory] (ServerService Thread Pool -- 57) ISPN000161: Using a batchMode tran

saction manager

[Server:server-one] 11:32:27,904 INFO [org.infinispan.factories.TransactionMana

gerFactory] (ServerService Thread Pool -- 56) ISPN000161: Using a batchMode tran

saction manager

[Server:server-one] 11:32:27,904 INFO [org.infinispan.factories.TransactionMana

gerFactory] (ServerService Thread Pool -- 55) ISPN000161: Using a batchMode tran

saction manager

[Server:server-one] 11:32:27,906 INFO [org.infinispan.factories.TransactionMana

gerFactory] (ServerService Thread Pool -- 54) ISPN000161: Using a batchMode tran

saction manager

[Server:server-one] 11:32:27,904 INFO [org.infinispan.factories.TransactionMana

gerFactory] (ServerService Thread Pool -- 52) ISPN000161: Using a batchMode tran

saction manager

[Server:server-one] 11:32:28,729 INFO [org.infinispan.jmx.CacheJmxRegistration]

(ServerService Thread Pool -- 55) ISPN000031: MBeans were successfully register

ed to the platform MBean server.

[Server:server-one] 11:32:28,779 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 55) JBAS010281: Started default-host/hibernate cache f

rom web container

[Server:server-one] 11:32:28,823 INFO [org.infinispan.jmx.CacheJmxRegistration]

(ServerService Thread Pool -- 56) ISPN000031: MBeans were successfully register

ed to the platform MBean server.

[Server:server-one] 11:32:28,825 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 56) JBAS010281: Started default-host/eclipselink cache

from web container

[Server:server-one] 11:32:28,831 INFO [org.infinispan.jmx.CacheJmxRegistration]

(ServerService Thread Pool -- 52) ISPN000031: MBeans were successfully register

ed to the platform MBean server.

[Server:server-one] 11:32:28,832 INFO [org.infinispan.jmx.CacheJmxRegistration]

(ServerService Thread Pool -- 54) ISPN000031: MBeans were successfully register

ed to the platform MBean server.

[Server:server-one] 11:32:28,833 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 52) JBAS010281: Started default-host/myCluster cache f

rom web container

[Server:server-one] 11:32:28,834 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 54) JBAS010281: Started repl cache from web container

[Server:server-one] 11:32:28,837 INFO [org.infinispan.jmx.CacheJmxRegistration]

(ServerService Thread Pool -- 57) ISPN000031: MBeans were successfully register

ed to the platform MBean server.

[Server:server-one] 11:32:28,840 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 57) JBAS010281: Started default-host/AccessoLDAP cache

from web container

[Server:server-one] 11:32:28,873 INFO [org.jboss.web] (ServerService Thread Poo

l -- 52) JBAS018210: Register web context: /eclipselink

[Server:server-one] 11:32:28,880 INFO [org.jboss.web] (ServerService Thread Poo

l -- 56) JBAS018210: Register web context: /myCluster

[Server:server-one] 11:32:28,887 INFO [org.jboss.web] (ServerService Thread Poo

l -- 54) JBAS018210: Register web context: /AccessoLDAP

[Server:server-one] 11:32:28,887 INFO [org.jboss.web] (ServerService Thread Poo

l -- 57) JBAS018210: Register web context: /hibernate

[Server:server-one] 11:32:29,610 INFO [org.jboss.as.server] (Controller Boot Th

read) JBAS018559: Deployed "eclipselink.war" (runtime-name : "eclipselink.war")

[Server:server-one] 11:32:29,612 INFO [org.jboss.as.server] (Controller Boot Th

read) JBAS018559: Deployed "hibernate.war" (runtime-name : "hibernate.war")

[Server:server-one] 11:32:29,613 INFO [org.jboss.as.server] (Controller Boot Th

read) JBAS018559: Deployed "myCluster.war" (runtime-name : "myCluster.war")

[Server:server-one] 11:32:29,614 INFO [org.jboss.as.server] (Controller Boot Th

read) JBAS018559: Deployed "AccessoLDAP.war" (runtime-name : "AccessoLDAP.war")

[Server:server-one] 11:32:29,636 INFO [org.jboss.as] (Controller Boot Thread) J

BAS015874: JBoss EAP 6.3.0.GA (AS 7.4.0.Final-redhat-19) started in 35897ms - St

arted 391 of 467 services (138 services are lazy, passive or on-demand)

[Host Controller] 11:33:46,207 INFO [org.jboss.as.domain] (Host Controller Serv

ice Threads - 30) JBAS010918: Registered remote slave host "testuser", JBoss EAP

6.3.0.GA (AS 7.4.0.Final-redhat-19)

[Server:server-one] 11:34:13,468 INFO [org.jboss.as.clustering] (Incoming-3,sha

red=udp) JBAS010225: New cluster view for partition web (id: 1, delta: 1, merge:

false) : [master:server-one/web, testuser:server-two/web]

[Server:server-one] 11:34:13,470 INFO [org.infinispan.remoting.transport.jgroup

s.JGroupsTransport] (Incoming-3,shared=udp) ISPN000094: Received new cluster vie

w: [master:server-one/web|1] [master:server-one/web, testuser:server-two/web]

[Server:server-one] 11:57:15,741 INFO [org.jboss.as.server.deployment] (MSC ser

vice thread 1-2) JBAS015876: Starting deployment of "SSLDemo.war" (runtime-name:

"SSLDemo.war")

[Server:server-one] 11:57:15,920 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-4) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:57:15,922 INFO [org.infinispan.configuration.cache.Evict

ionConfigurationBuilder] (MSC service thread 1-4) ISPN000152: Passivation config

ured without an eviction policy being selected. Only manually evicted entities w

ill be passivated.

[Server:server-one] 11:57:15,934 INFO [org.infinispan.factories.TransactionMana

gerFactory] (ServerService Thread Pool -- 65) ISPN000161: Using a batchMode tran

saction manager

[Server:server-one] 11:57:15,960 INFO [org.infinispan.jmx.CacheJmxRegistration]

(ServerService Thread Pool -- 65) ISPN000031: MBeans were successfully register

ed to the platform MBean server.

[Server:server-one] 11:57:15,961 INFO [org.jboss.as.clustering.infinispan] (Ser

verService Thread Pool -- 65) JBAS010281: Started default-host/SSLDemo cache fro

m web container

[Server:server-one] 11:57:15,964 INFO [org.jboss.web] (ServerService Thread Poo

l -- 65) JBAS018210: Register web context: /SSLDemo

[Server:server-one] 11:57:16,499 INFO [org.jboss.as.server] (ServerService Thre

ad Pool -- 64) JBAS018559: Deployed "SSLDemo.war" (runtime-name : "SSLDemo.war")

and can not see anything...
Actions
2. Re: SSL on jboss 6.3 eap clustered

kerberos5 Apr 5, 2016 11:07 AM (in response to kerberos5)

Ok! I have noticed this into logs of server1:

11:32:11,844 INFO [org.apache.coyote.http11.Http11Protocol] (MSC service thread 1-3) JBWEB003001: Coyote HTTP/1.1 initializing on : http-/192.168.50.79:8543

11:32:11,854 INFO [org.apache.coyote.http11.Http11Protocol] (MSC service thread 1-3) JBWEB003000: Coyote HTTP/1.1 starting on: http-/192.168.50.79:8543

https listening on port 8543

on server2:

11:33:55,924 INFO [org.apache.coyote.http11.Http11Protocol] (MSC service thread 1-4) JBWEB003001: Coyote HTTP/1.1 initializing on : http-/192.168.50.82:8643

11:33:55,925 INFO [org.apache.coyote.http11.Http11Protocol] (MSC service thread 1-4) JBWEB003000: Coyote HTTP/1.1 starting on: http-/192.168.50.82:8643

https listening on port 8643

how do I force all and 2 instances of port 8443???

thanks
Actions
3. Re: SSL on jboss 6.3 eap clustered

kerberos5 Apr 6, 2016 10:27 AM (in response to kerberos5)

the simple solution is add parameters for fixed port https on socket binding profile:

<profile name="ha">

<subsystem xmlns="urn:jboss:domain:web:2.1" default-virtual-server="default-host" native="false">

<connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http" redirect-port="8443"/>

<connector name="https" scheme="https" protocol="HTTP/1.1" socket-binding="https" enable-lookups="false" secure="true">

<ssl name="https"

password="admin1234"

protocol="TLSv1"

key-alias="cciss"

certificate-key-file="${jboss.server.config.dir}/cciss.keystore"

certificate-file="${jboss.server.config.dir}/cciss.keystore"/>

</connector>

<virtual-server name="default-host" enable-welcome-root="true">

<alias name="server-two"/>

<alias name="cciss.mctc.local"/>

</virtual-server>

</subsystem>

<socket-binding-group name="ha-sockets".../>

<socket-binding-group name="ha-sockets" default-interface="public">

<socket-binding name="ajp" port="8009"/>

<socket-binding name="http" port="8088"/>

<socket-binding name="https" port="8443" fixed-port="true"/>

<socket-binding name="remoting" port="4447"/>

<socket-binding name="txn-recovery-environment" port="4712"/>

<socket-binding name="txn-status-manager" port="4713"/>

<outbound-socket-binding name="mail-smtp">

<remote-destination host="localhost" port="25"/>

</outbound-socket-binding>

</socket-binding-group>

If you use jboss-cli.bat....

/profile=ha/subsystem=web/connector=https/:add(name=https,socket-binding=https,scheme=https,protocol=HTTP/1.1,secure=true,enabled=true,enable-lookups=false, redirect-port=8443)

/profile=ha/subsystem=web/connector=https/ssl=configuration:add(name="https",key-alias="cciss",password="admin1234",certificate-key-file="${${jboss.server.config.dir}/cciss.keystore",protocol="TLSv1",verify-client="false",certificate-file="${${jboss.server.config.dir}/cciss.keystore")

/socket-binding-group=ha-sockets/socket-binding=http:write-attribute(name=fixed-port,value=true)

enjoy!
Actions
4. Re: SSL on jboss 6.3 eap clustered

galaxyeleven Apr 10, 2016 1:54 PM (in response to kerberos5)

___________________________
Umroh Murah
Promo Umroh Murah
Paket Wisata Murah
___________________________
Actions

Go to original post