After much prodding I got some info in September 2003.  I saved the answers but forgot 
to get the second page.  This was probably for 3.2.1, so not sure if there are 
differences for the latest version.  Good thing I saved it because it appears they 
deleted it from the forums.  I'll leave it to the reader to speculate on why that 
might be.

Below is what I coaxed out of Adrian, though I think there was still something missing 
that was posted on the second page of the now deleted thread.

One thing that snagged me was needing to set up the client-side truststore for the 
entity connecting to the server's JBossMQ instance and needing to have the server's 
certificate in the client's truststore.

Posted Sep 24, 2003 5:48 PM by [EMAIL PROTECTED]:

OK, I just tried it, here is what I did.

1) Created a keystore in server/default/conf/test.keystore
2) Created a security domain that references it
(resource: is jboss specific protocol that loads from the
classloader, conf/ is the first classloader installed by jboss)





resource:test.keystore
ssltest


3) Deployed a HTTPSUIL2ConnectionFactory


<depends optional-attribute-name="Invoker">jboss.mq:service=Invoker
HTTPSUIL2ConnectionFactory
HTTPSUIL2XAConnectionFactory
8193
60000
true
<!-- Used to disconnect the client if there is no activity -->
<!-- Ensure this is greater than the ping period -->
70000
<!-- The size of the buffer (in bytes) wrapping the socket -->
<!-- The buffer is flushed after each request -->
2048
<!-- Large messages may block the ping/pong -->
<!-- A pong is simulated after each chunk (in bytes) for both reading and writing -->
<!-- It must be larger than the buffer size -->
1000000
org.jboss.security.ssl.ClientSocketFactory
org.jboss.security.ssl.DomainServerSocketFactory
java:/jaas/SSL


On the client set the system property to use the keystore
as the truststore.









Job Done.

Regards,
Adrian 

View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3841266#3841266

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3841266


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to