Sample SSL Configurations for AS7

jboss-cli.xml

<jboss-cli xmlns="urn:jboss:cli:1.0">
  <ssl>
    <keyStore>/home/darranl/src/ide/eclipse/as7/remoting-standalone/client.keystore</keyStore>
    <keyStorePassword>keystore_password</keyStorePassword>
    <trustStore>/home/darranl/src/ide/eclipse/as7/remoting-standalone/client.truststore</trustStore>
    <trustStorePassword>truststore_password</trustStorePassword>
  </ssl>
</jboss-cli>

XML_Snippets.xml

* SSL System Properties *

JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStore=/home/darranl/src/ide/eclipse/as7/remoting-standalone/client.truststore -Djavax.net.ssl.trustStorePassword=truststore_password"
JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.keyStore=/home/darranl/src/ide/eclipse/as7/remoting-standalone/client.keystore -Djavax.net.ssl.keyStorePassword=keystore_password"

* Original * 

    <management>
        <security-realms>
            <security-realm name="ManagementRealm">
                <authentication>
                    <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
                </authentication>
            </security-realm>
        </security-realms>
        <management-interfaces>
            <native-interface security-realm="ManagementRealm">
                <socket-binding native="management-native"/>
            </native-interface>
            <http-interface security-realm="ManagementRealm">
                <socket-binding http="management-http"/>
            </http-interface>
        </management-interfaces>
    </management>


* SSL ONLY - No Client Cert Auth *

    <management>
        <security-realms>
            <security-realm name="ManagementRealm">
                <server-identities>
                    <ssl>
                        <keystore path="server.keystore" relative-to="jboss.server.config.dir" password="keystore_password" />
                    </ssl>
                </server-identities>
                <authentication>
                    <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
                </authentication>
            </security-realm>
        </security-realms>
        <management-interfaces>
            <native-interface security-realm="ManagementRealm">
                <socket-binding native="management-native"/>
            </native-interface>
            <http-interface security-realm="ManagementRealm">
                <socket interface="management" port="9990" secure-port="9443" />
                <!--<socket-binding http="management-http"/>-->
            </http-interface>
        </management-interfaces>
    </management>

* SSL with OPTIONAL Client Cert auth *

    <management>
        <security-realms>
            <security-realm name="ManagementRealm">
                <server-identities>
                    <ssl>
                        <keystore path="server.keystore" relative-to="jboss.server.config.dir" password="keystore_password" />
                    </ssl>
                </server-identities>
                <authentication>
                    <truststore path="server.truststore" relative-to="jboss.server.config.dir" password="truststore_password" />
                    <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/>
                </authentication>
            </security-realm>
        </security-realms>
        <management-interfaces>
            <native-interface security-realm="ManagementRealm">
                <socket-binding native="management-native"/>
            </native-interface>
            <http-interface security-realm="ManagementRealm">
                <socket interface="management" port="9990" secure-port="9443" />
                <!--<socket-binding http="management-http"/>-->
            </http-interface>
        </management-interfaces>
    </management>

* SSL with MANDATORY Client Cert auth *

    <management>
        <security-realms>
            <security-realm name="ManagementRealm">
                <server-identities>
                    <ssl>
                        <keystore path="server.keystore" relative-to="jboss.server.config.dir" password="keystore_password" />
                    </ssl>
                </server-identities>
                <authentication>
                    <truststore path="server.truststore" relative-to="jboss.server.config.dir" password="truststore_password" />                    
                </authentication>
            </security-realm>
        </security-realms>
        <management-interfaces>
            <native-interface security-realm="ManagementRealm">
                <socket-binding native="management-native"/>
            </native-interface>
            <http-interface security-realm="ManagementRealm">
                <socket interface="management" port="9990" secure-port="9443" />
                <!--<socket-binding http="management-http"/>-->
            </http-interface>
        </management-interfaces>
    </management>