Secure Management Interfaces in JBoss EAP 7 using One-way SSL and Legacy Security

Solution Verified - Updated -

Issue

  • Secure / Encrypt jboss-cli connection
  • Access management console over `https
  • Getting the following error
        ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8) MSC000001: Failed to start service org.wildfly.management.http.extensible: org.jboss.msc.service.StartException in service org.wildfly.management.http.extensible: WFLYSRV0083: Failed to start the http-interface service
            at org.jboss.as.server.mgmt.UndertowHttpManagementService.start(UndertowHttpManagementService.java:342)
            at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:2032)
            at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1955)
            at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
            at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
            at java.lang.Thread.run(Thread.java:748)
        Caused by: java.lang.IllegalArgumentException: WFLYDMHTTP0012: A secure socket has been defined for the HTTP interface, however the referenced security realm is not supplying a SSLContext.
  • We have a RHEL server with two versions of JBoss EAP (7.0 and 7.3) JBoss EAP 7 is using ports 9990 and 9999 both declared in ManagementRealm in management-interfaces in host.xml, JBoss EAP 7.3 is using port 9993. We can use cli with jboss 7.0 but while trying to connect to Jboss 7.3 looks like it is getting connected to Jboss 7. The following error appears while trying to connect to the server using jboss.cli.sh
Failed to connect to the controller: The controller is not available at 192.168.0.2:9993: java.net.ConnectException: WFLYPRT0053: Could not connect to remote+http://192.168.0.2:9993. The connection failed: WFLYPRT0053: Could not connect to remote+http://192.168.0.2:9993. The connection failed: Invalid response

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 7
  • Legacy Security
  • Hypertext Transfer Protocol Secure (HTTPS)
  • Transport Layer Security (TLS)
  • JBoss Command-Line interface (CLI), http-remoting connector, or management interface connections

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content