Bug 1013853

Summary: RFE: Encrypt node traffic
Product: [JBoss] JBoss Data Grid 6 Reporter: Misha H. Ali <mhusnain>
Component: DocumentationAssignee: gsheldon
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: 6.2.0CC: dmehra, gsheldon, jdg-bugs, mgencur, ttarrant, vjuranek
Target Milestone: ER3   
Target Release: 6.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-07-21 02:15:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1092056    

Description Misha H. Ali 2013-09-30 23:47:29 UTC
Encrypt traffic between nodes of the cluster via ENRCYPT - will work for both Library and Client-server modes.

Comment 4 Misha H. Ali 2013-10-09 22:45:51 UTC
Divya, 

This item was added to the current scope of work after your email (Subject: Secure communication within JDG cluster).

Gemma consulted with Tristan about this feature and his comments were that this is not available in JDG 6.2 as it is not in the ERD.

I've copied Tristan into this bug as well in case he has additional comments the response leads me to believe that this is NOTABUG for this release. Do you ACK closing this bug for 6.2?

Comment 8 Misha H. Ali 2013-10-19 07:36:27 UTC
Commented out topics for this bug as part of Beta docs preparation.

Comment 13 Vojtech Juranek 2014-07-07 10:17:43 UTC
It should be setup as 
<security-realm name="ApplicationRealm">
  <server-identities>
    <ssl protocol="...">
      <keystore path="..." relative-to="..." keystore-password="..." alias="..." key-password="..." />
    </ssl>
  </server-identities>

  [... authentication/authorization ...]

 </security-realms>

More detains about possible options can be found in https://docs.jboss.org/author/display/AS71/Security+Realms  in "Detailed Configuration" section.

Comment 22 Vojtech Juranek 2014-07-10 06:29:49 UTC
> Please confirm each point with Martin/Vojtech

All changes proposed by Divya in comment #18 makes sense for me and are correct

Comment 26 gsheldon 2014-07-14 06:42:40 UTC
Tracking comments 24 and 25 in the appropriate bug (BZ#1067739).

Setting this bug back to ON QA for everything else and a NEEDINFO for Martin for QE ack.

Comment 27 Misha H. Ali 2014-07-21 02:15:07 UTC
Now available on access.redhat.com under the JBoss Data Grid 6.3 documentation label.