Note that there are some explanatory texts on larger screens.

plurals
  1. POJBoss management via SSL
    primarykey
    data
    text
    <p>I have a problem with my JBoss AS 7.1.1 after I configured it to use ssl for the management interface.</p> <p>I followed <a href="https://community.jboss.org/wiki/SecuringAdministrationConsoleWithHttps" rel="nofollow">this guide</a> to secure the admin console. This worked.</p> <p>But now I realized that the native management interface does not work anymore.<br /> When I start my JBoss in Eclipse via the JBoss Tools I get lots of these error messages:</p> <pre><code> ERROR [org.jboss.remoting.remote.connection] (Remoting "myhost:MANAGEMENT" read-1) JBREM000200: Remote connection failed: javax.net.ssl.SSLException: Received fatal alert: certificate_unknown </code></pre> <p>I have the following configuration in the <code>standalone.xml</code>:</p> <pre><code> &lt;management&gt; &lt;security-realms&gt; &lt;security-realm name="ManagementRealm"&gt; &lt;server-identities&gt; &lt;ssl&gt; &lt;keystore path="my.keystore" relative-to="jboss.server.config.dir" password="xxPASSxx"/&gt; &lt;/ssl&gt; &lt;/server-identities&gt; &lt;authentication&gt; &lt;properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/&gt; &lt;/authentication&gt; &lt;/security-realm&gt; ... &lt;/security-realms&gt; &lt;management-interfaces&gt; &lt;native-interface security-realm="ManagementRealm"&gt; &lt;socket-binding native="management-native"/&gt; &lt;/native-interface&gt; &lt;http-interface security-realm="ManagementRealm"&gt; &lt;socket-binding https="management-https"/&gt; &lt;/http-interface&gt; &lt;/management-interfaces&gt; &lt;/management&gt; &lt;interfaces&gt; &lt;interface name="management"&gt; &lt;any-address/&gt; &lt;/interface&gt; ... &lt;/interfaces&gt; &lt;socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}"&gt; &lt;socket-binding name="management-native" interface="management" port="${jboss.management.native.port:9999}"/&gt; &lt;socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9443}"/&gt; &lt;socket-binding name="ajp" port="8009"/&gt; &lt;socket-binding name="http" port="8080"/&gt; &lt;socket-binding name="https" port="8443"/&gt; &lt;socket-binding name="osgi-http" interface="management" port="8090"/&gt; &lt;socket-binding name="remoting" port="4447"/&gt; &lt;socket-binding name="txn-recovery-environment" port="4712"/&gt; &lt;socket-binding name="txn-status-manager" port="4713"/&gt; &lt;socket-binding name="messaging" port="5445"/&gt; &lt;socket-binding name="messaging-throughput" port="5455"/&gt; &lt;outbound-socket-binding name="mail-smtp"&gt; &lt;remote-destination host="localhost" port="25"/&gt; &lt;/outbound-socket-binding&gt; &lt;/socket-binding-group&gt; </code></pre> <p>What did I miss?</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload