CLI is unable to connect to server once only TLSv1.2 is enabled in ManagementRealm
Issue
After enabling only TLSv1.2 in ManagementRealm like the following,
/core-service=management/security-realm=ManagementRealm/server-identity=ssl:write-attribute(name=enabled-protocols,value=["TLSv1.2"])
Jboss CLI is unable to connect to server which is running with JDK1.7 as follows.
$ ./jboss-cli.sh --connect
org.jboss.as.cli.CliInitializationException: Failed to connect to the controller
at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:299)
at org.jboss.as.cli.impl.CliLauncher.main(CliLauncher.java:277)
at org.jboss.as.cli.CommandLineMain.main(CommandLineMain.java:45)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.jboss.modules.Module.run(Module.java:312)
at org.jboss.modules.Main.main(Main.java:473)
Caused by: org.jboss.as.cli.CommandLineException: Unable to negotiate SSL connection with controller at localhost:9999
at org.jboss.as.cli.impl.CommandContextImpl.tryConnection(CommandContextImpl.java:1048)
at org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:887)
at org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:863)
at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:297)
... 8 more
$
If CLI is run by JDK 1.8, it can connect to server.
Environment
- Red Hat JBoss Enterprise Application Platform
- 6.4.x
- OpenJDK 1.7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
