CLI is unable to connect to server once only TLSv1.2 is enabled in ManagementRealm
Issue
After enabling only TLSv1.2 in ManagementRealm like the following,
/core-service=management/security-realm=ManagementRealm/server-identity=ssl:write-attribute(name=enabled-protocols,value=["TLSv1.2"])
Jboss CLI is unable to connect to server which is running with JDK1.7 as follows.
$ ./jboss-cli.sh --connect
org.jboss.as.cli.CliInitializationException: Failed to connect to the controller
at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:299)
at org.jboss.as.cli.impl.CliLauncher.main(CliLauncher.java:277)
at org.jboss.as.cli.CommandLineMain.main(CommandLineMain.java:45)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.jboss.modules.Module.run(Module.java:312)
at org.jboss.modules.Main.main(Main.java:473)
Caused by: org.jboss.as.cli.CommandLineException: Unable to negotiate SSL connection with controller at localhost:9999
at org.jboss.as.cli.impl.CommandContextImpl.tryConnection(CommandContextImpl.java:1048)
at org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:887)
at org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:863)
at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:297)
... 8 more
$
If CLI is run by JDK 1.8, it can connect to server.
Environment
- Red Hat JBoss Enterprise Application Platform
- 6.4.x
- OpenJDK 1.7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.