jbossas/jboss-as — pull request #939 by darranl (2011-12-17 16:08:00+00:00)
Title: [AS7-1387] Enabling SSL an ClientCert / External Support

This commit adds the following: -
- Definition of a truststore within security realm to be used to authenticate remote clients.
- Enable SSL for Native interface if keystore defined.
- Enable ClientCert for HTTP and External for Native when a truststore is available.
(This is in addition to the existing mechanisms, when we add authorization the roles assigned will give different capabilities based on mechanism as well)
- Updated ModelControllerClient to use an initialised SSLContext.
- Updated CLI to initialise a SSLContext where needed and supply a custom trust manager that allows for interactive trust decisions with the user i.e. they can choose there and then if they want to accept a servers certificate without needing to manually import a servers certificate.
(Pre-defined trust stores are still supported so these can be used instead of the CLI managed trust store if desired)