You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Bin He (JIRA)" <ji...@apache.org> on 2009/08/20 05:24:14 UTC

[jira] Created: (GERONIMO-4806) improvement about ssl in JMS broker

improvement about ssl  in JMS broker
------------------------------------

                 Key: GERONIMO-4806
                 URL: https://issues.apache.org/jira/browse/GERONIMO-4806
             Project: Geronimo
          Issue Type: Improvement
      Security Level: public (Regular issues)
          Components: documentation
    Affects Versions: 2.2
            Reporter: Bin He


1、click  "JMS Server" porlet 
2、click  "Add JMS Broker"
3、input "testBroker"  as broker name
4、I need  to update this xml file like this:

<transportConnectors>
            <!--
            <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
            <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
            <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
             <!--            
           <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
            -->
</transportConnectors>


          <sslContext>
            <sslContext keyStore="file:${activemq.data}/a.ks" 
                keyStorePassword="secret" 
                trustStore="file:${activemq.data}/a.ks" 
                trustStorePassword="secret"/>
        </sslContext>
        
5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
and  rename this keystore file as  "a.ks".(Note in this case the brokerName is testBroker).

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[jira] Updated: (GERONIMO-4806) improvement about ssl in JMS broker

Posted by "Bin He (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/GERONIMO-4806?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bin He updated GERONIMO-4806:
-----------------------------

    Description: 
1、click  "JMS Server" porlet 
2、click  "Add JMS Broker"
3、input "testBroker"  as broker name
4、I need  to update this xml file like this:

<transportConnectors>
            <!--
            <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
            <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
            <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
             <!--            
           <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
            -->
</transportConnectors>


          <sslContext>
            <sslContext keyStore="file:${activemq.data}/a.ks" 
                keyStorePassword="secret" 
                trustStore="file:${activemq.data}/a.ks" 
                trustStorePassword="secret"/>
        </sslContext>
        
5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
and  rename this keystore file.(It's not compulsory  to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
(Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").

  was:
1、click  "JMS Server" porlet 
2、click  "Add JMS Broker"
3、input "testBroker"  as broker name
4、I need  to update this xml file like this:

<transportConnectors>
            <!--
            <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
            <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
            <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
             <!--            
           <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
            -->
</transportConnectors>


          <sslContext>
            <sslContext keyStore="file:${activemq.data}/a.ks" 
                keyStorePassword="secret" 
                trustStore="file:${activemq.data}/a.ks" 
                trustStorePassword="secret"/>
        </sslContext>
        
5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
and  rename this keystore file.(It's not compulsory) to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
(Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").


> improvement about ssl  in JMS broker
> ------------------------------------
>
>                 Key: GERONIMO-4806
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4806
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: documentation
>    Affects Versions: 2.2
>            Reporter: Bin He
>         Attachments: testBroker.xml
>
>
> 1、click  "JMS Server" porlet 
> 2、click  "Add JMS Broker"
> 3、input "testBroker"  as broker name
> 4、I need  to update this xml file like this:
> <transportConnectors>
>             <!--
>             <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
>             <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
>             <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
>              <!--            
>            <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
>             -->
> </transportConnectors>
>           <sslContext>
>             <sslContext keyStore="file:${activemq.data}/a.ks" 
>                 keyStorePassword="secret" 
>                 trustStore="file:${activemq.data}/a.ks" 
>                 trustStorePassword="secret"/>
>         </sslContext>
>         
> 5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
> and  rename this keystore file.(It's not compulsory  to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
> (Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[jira] Closed: (GERONIMO-4806) improvement about ssl in JMS broker

Posted by "Bin He (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/GERONIMO-4806?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bin He closed GERONIMO-4806.
----------------------------

       Resolution: Fixed
    Fix Version/s: 2.2

Jeff has updated the doc.

> improvement about ssl  in JMS broker
> ------------------------------------
>
>                 Key: GERONIMO-4806
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4806
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: documentation
>    Affects Versions: 2.2
>            Reporter: Bin He
>             Fix For: 2.2
>
>         Attachments: testBroker.xml
>
>
> 1、click  "JMS Server" porlet 
> 2、click  "Add JMS Broker"
> 3、input "testBroker"  as broker name
> 4、I need  to update this xml file like this:
> <transportConnectors>
>             <!--
>             <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
>             <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
>             <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
>              <!--            
>            <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
>             -->
> </transportConnectors>
>           <sslContext>
>             <sslContext keyStore="file:${activemq.data}/a.ks" 
>                 keyStorePassword="secret" 
>                 trustStore="file:${activemq.data}/a.ks" 
>                 trustStorePassword="secret"/>
>         </sslContext>
>         
> 5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
> and  rename this keystore file.(It's not compulsory  to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
> (Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[jira] Updated: (GERONIMO-4806) improvement about ssl in JMS broker

Posted by "Bin He (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/GERONIMO-4806?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bin He updated GERONIMO-4806:
-----------------------------

    Attachment: testBroker.xml

> improvement about ssl  in JMS broker
> ------------------------------------
>
>                 Key: GERONIMO-4806
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4806
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: documentation
>    Affects Versions: 2.2
>            Reporter: Bin He
>         Attachments: testBroker.xml
>
>
> 1、click  "JMS Server" porlet 
> 2、click  "Add JMS Broker"
> 3、input "testBroker"  as broker name
> 4、I need  to update this xml file like this:
> <transportConnectors>
>             <!--
>             <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
>             <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
>             <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
>              <!--            
>            <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
>             -->
> </transportConnectors>
>           <sslContext>
>             <sslContext keyStore="file:${activemq.data}/a.ks" 
>                 keyStorePassword="secret" 
>                 trustStore="file:${activemq.data}/a.ks" 
>                 trustStorePassword="secret"/>
>         </sslContext>
>         
> 5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
> and  rename this keystore file as  "a.ks".(Note in this case the brokerName is testBroker).

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[jira] Commented: (GERONIMO-4806) improvement about ssl in JMS broker

Posted by "Chi Runhua (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/GERONIMO-4806?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12750348#action_12750348 ] 

Chi Runhua commented on GERONIMO-4806:
--------------------------------------

Doc updated accordingly for 2.2

http://cwiki.apache.org/GMOxDOC22/configuring-the-jms-server.html

Any questions, please let me know.

Jeff C

> improvement about ssl  in JMS broker
> ------------------------------------
>
>                 Key: GERONIMO-4806
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4806
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: documentation
>    Affects Versions: 2.2
>            Reporter: Bin He
>         Attachments: testBroker.xml
>
>
> 1、click  "JMS Server" porlet 
> 2、click  "Add JMS Broker"
> 3、input "testBroker"  as broker name
> 4、I need  to update this xml file like this:
> <transportConnectors>
>             <!--
>             <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
>             <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
>             <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
>              <!--            
>            <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
>             -->
> </transportConnectors>
>           <sslContext>
>             <sslContext keyStore="file:${activemq.data}/a.ks" 
>                 keyStorePassword="secret" 
>                 trustStore="file:${activemq.data}/a.ks" 
>                 trustStorePassword="secret"/>
>         </sslContext>
>         
> 5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
> and  rename this keystore file.(It's not compulsory  to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
> (Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

[jira] Updated: (GERONIMO-4806) improvement about ssl in JMS broker

Posted by "Bin He (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/GERONIMO-4806?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bin He updated GERONIMO-4806:
-----------------------------

    Description: 
1、click  "JMS Server" porlet 
2、click  "Add JMS Broker"
3、input "testBroker"  as broker name
4、I need  to update this xml file like this:

<transportConnectors>
            <!--
            <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
            <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
            <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
             <!--            
           <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
            -->
</transportConnectors>


          <sslContext>
            <sslContext keyStore="file:${activemq.data}/a.ks" 
                keyStorePassword="secret" 
                trustStore="file:${activemq.data}/a.ks" 
                trustStorePassword="secret"/>
        </sslContext>
        
5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
and  rename this keystore file.(It's not compulsory) to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
(Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").

  was:
1、click  "JMS Server" porlet 
2、click  "Add JMS Broker"
3、input "testBroker"  as broker name
4、I need  to update this xml file like this:

<transportConnectors>
            <!--
            <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
            <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
            <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
             <!--            
           <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
            -->
</transportConnectors>


          <sslContext>
            <sslContext keyStore="file:${activemq.data}/a.ks" 
                keyStorePassword="secret" 
                trustStore="file:${activemq.data}/a.ks" 
                trustStorePassword="secret"/>
        </sslContext>
        
5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
and  rename this keystore file as  "a.ks".(Note in this case the brokerName is testBroker).


> improvement about ssl  in JMS broker
> ------------------------------------
>
>                 Key: GERONIMO-4806
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-4806
>             Project: Geronimo
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: documentation
>    Affects Versions: 2.2
>            Reporter: Bin He
>         Attachments: testBroker.xml
>
>
> 1、click  "JMS Server" porlet 
> 2、click  "Add JMS Broker"
> 3、input "testBroker"  as broker name
> 4、I need  to update this xml file like this:
> <transportConnectors>
>             <!--
>             <transportConnector name="openwire" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" />            
>             <transportConnector name="openwire2" uri="tcp://${ServerHostname}:${* + ${PortOffset}}" discoveryUri="multicast://default"/>-->
>             <transportConnector name="ssl" uri="ssl://${ServerHostname}:${60009 + ${PortOffset}}"/>
>              <!--            
>            <transportConnector name="stomp" uri="stomp://${ServerHostname}:${* + ${PortOffset}}"/>            
>             -->
> </transportConnectors>
>           <sslContext>
>             <sslContext keyStore="file:${activemq.data}/a.ks" 
>                 keyStorePassword="secret" 
>                 trustStore="file:${activemq.data}/a.ks" 
>                 trustStorePassword="secret"/>
>         </sslContext>
>         
> 5、 I need to copy  any keystore file(geronimo-default  or any other keystore file that I have created) in <geronimo-home>/var/security/keystores/   to   <geronimo-home>/var/activemq/data/$brokerName/           
> and  rename this keystore file.(It's not compulsory) to copy or rename,it's just for convinence.In a word , I have to make this keystore in sslContext  link to a keystore file which has existed. ) 
> (Note in this case the brokerName is testBroker  and  the name of the keystore file in <geronimo-home>/var/activemq/data/$brokerName/   is  "a.ks").

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.