Accessing JMX with jconsole over SSL on EAP 6
Issue
- How do I secure the JMX interfaces with SSL
- After enabling SSL within the management realm. The web console is accessible over SSL, but this does not work for the JMX/management interface.
- We want to secure Native interface with secure port. We tried below configuration and restarted master.
<security-realms>
<security-realm name="ManagementRealm">
<server-identities>
<ssl>
<keystore path="/path/to/mykeystore.jks" keystore-password="secret" alias="mykey"/>
</ssl>
</server-identities>
<authentication>
<properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir"/>
</authentication>
</security-realm>
...
<management-interfaces>
<native-interface security-realm="ManagementRealm">
<socket interface="management" secure-port="${jboss.management.https.port:9990}"/>
</native-interface>
<http-interface security-realm="ManagementRealm">
<socket interface="management" secure-port="${jboss.management.https.port:9443}"/>
</http-interface>
</management-interfaces>
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
