Accessing JMX with jconsole over SSL on EAP 6
Issue
- How do I secure the JMX interfaces with SSL
- After enabling SSL within the management realm. The web console is accessible over SSL, but this does not work for the JMX/management interface.
- We want to secure Native interface with secure port. We tried below configuration and restarted master.
<security-realms>
<security-realm name="ManagementRealm">
<server-identities>
<ssl>
<keystore path="/path/to/mykeystore.jks" keystore-password="secret" alias="mykey"/>
</ssl>
</server-identities>
<authentication>
<properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir"/>
</authentication>
</security-realm>
...
<management-interfaces>
<native-interface security-realm="ManagementRealm">
<socket interface="management" secure-port="${jboss.management.https.port:9990}"/>
</native-interface>
<http-interface security-realm="ManagementRealm">
<socket interface="management" secure-port="${jboss.management.https.port:9443}"/>
</http-interface>
</management-interfaces>
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.