Bug 1235185

Summary: Missing support for X509Certificate from the transport layer
Product: [JBoss] JBoss Fuse Service Works 6 Reporter: Martin Weiler <mweiler>
Component: SwitchYardAssignee: tcunning
Status: VERIFIED --- QA Contact: Matej Melko <mmelko>
Severity: high Docs Contact:
Priority: high    
Version: 6.0.0 GACC: jochen.riedlinger, ppecka, soa-p-jira
Target Milestone: CR1   
Target Release: 6.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1236029 (view as bug list) Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1214695    

Description Martin Weiler 2015-06-24 08:38:24 UTC
Description of problem:
Platform issue for SWITCHYARD-2737:

SY is missing support for "two-way-SSL", i. e. the client certificate from transport layer is used for authentication in the application layer.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 tcunning 2015-07-08 16:59:01 UTC
Should be verifiable in 6.2.1 ER2.

Comment 4 JBoss JIRA Server 2015-11-05 14:45:49 UTC
Tom Cunningham <tcunning> updated the status of jira SWITCHYARD-2737 to Reopened

Comment 5 JBoss JIRA Server 2015-11-05 14:45:58 UTC
Tom Cunningham <tcunning> updated the status of jira SWITCHYARD-2737 to Closed

Comment 6 ppecka 2016-03-09 22:07:45 UTC
VERIFIED, with modified quickstart policy-security-cert and following connector

            <connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" secure="true">
                <ssl name="https" password="changeit" certificate-key-file="${jboss.server.config.dir}/users.jks" verify-client="true" ca-certificate-file="${jboss.server.config.dir}/users.jks"/>
            </connector>