[jira] Created: (ESBJAVA-558) Add support for multiple SSL configurations

Add support for multiple SSL configurations
-------------------------------------------

                 Key: ESBJAVA-558
                 URL: https://wso2.org/jira/browse/ESBJAVA-558
             Project: WSO2 ESB
          Issue Type: Improvement
          Components: Core Engine, Endpoints Management
    Affects Versions: 1.7
            Reporter: Kevin Treacy
            Assignee: Asankha Perera


Posted in forum: http://wso2.org/forum/thread/3928

It appears that the WSO2 ESB supports a single SSL configuration (key-store/trust-store) for the HTTPS transport sender that is registered in the axis2.xml file. Is it possible to have multiple SSL configurations at the endpoint or proxy level? The scenario that we need to support is that all the web services that the ESB will proxy will only be accessible over HTTPS and will all require HTTPS with mutual authentication (a.k.a. client certs) as the authentication mechanism. Each endpoint may require a different client cert, so the ESB must be able to present multiple identities

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

_______________________________________________
Esb-java-dev mailing list
Esb-java-dev@...
http://mailman.wso2.org/cgi-bin/mailman/listinfo/esb-java-dev

     [ https://wso2.org/jira/browse/ESBJAVA-558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ruwan Linton reassigned ESBJAVA-558:
------------------------------------

    Assignee: Ruwan Linton  (was: Asankha Perera)

> Add support for multiple SSL configurations
> -------------------------------------------
>
>                 Key: ESBJAVA-558
>                 URL: https://wso2.org/jira/browse/ESBJAVA-558
>             Project: WSO2 ESB
>          Issue Type: Improvement
>          Components: Core Engine, Endpoints Management
>    Affects Versions: 1.7
>            Reporter: Kevin Treacy
>            Assignee: Ruwan Linton
>
> Posted in forum: http://wso2.org/forum/thread/3928
> It appears that the WSO2 ESB supports a single SSL configuration (key-store/trust-store) for the HTTPS transport sender that is registered in the axis2.xml file. Is it possible to have multiple SSL configurations at the endpoint or proxy level? The scenario that we need to support is that all the web services that the ESB will proxy will only be accessible over HTTPS and will all require HTTPS with mutual authentication (a.k.a. client certs) as the authentication mechanism. Each endpoint may require a different client cert, so the ESB must be able to present multiple identities

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

_______________________________________________
Esb-java-dev mailing list
Esb-java-dev@...
https://wso2.org/cgi-bin/mailman/listinfo/esb-java-dev

     [ https://wso2.org/jira/browse/ESBJAVA-558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hiranya Jayathilaka reassigned ESBJAVA-558:
-------------------------------------------

    Assignee: Hiranya Jayathilaka  (was: Ruwan Linton)

> Add support for multiple SSL configurations
> -------------------------------------------
>
>                 Key: ESBJAVA-558
>                 URL: https://wso2.org/jira/browse/ESBJAVA-558
>             Project: WSO2 ESB
>          Issue Type: Improvement
>          Components: Core Engine, Endpoints Management
>    Affects Versions: 1.7
>            Reporter: Kevin Treacy
>            Assignee: Hiranya Jayathilaka
>
> Posted in forum: http://wso2.org/forum/thread/3928
> It appears that the WSO2 ESB supports a single SSL configuration (key-store/trust-store) for the HTTPS transport sender that is registered in the axis2.xml file. Is it possible to have multiple SSL configurations at the endpoint or proxy level? The scenario that we need to support is that all the web services that the ESB will proxy will only be accessible over HTTPS and will all require HTTPS with mutual authentication (a.k.a. client certs) as the authentication mechanism. Each endpoint may require a different client cert, so the ESB must be able to present multiple identities

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

_______________________________________________
Esb-java-dev mailing list
Esb-java-dev@...
https://wso2.org/cgi-bin/mailman/listinfo/esb-java-dev

    [ https://wso2.org/jira/browse/ESBJAVA-558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=28579#action_28579 ]

Hiranya Jayathilaka commented on ESBJAVA-558:
---------------------------------------------

This has been added to Synapse as a new feature. See http://issues.apache.org/jira/browse/SYNAPSE-563 for details. This feature will be available in Synapse 1.3 and future ESB releases. WSO2 ESB trunk currently depends on Synapse 1.3 branch and hence this feature is available on ESB snapshot builds too.

With the new enhancement one can define custom SSL profiles under the HTTPS transport sender in axis2.xml.

eg:
<profile>
   <servers>www.test1.org:80, www.test2.org:8080</servers>
   <KeyStore>
      ...
   </KeyStore>
   <TrustStore>
     ...
   </TrustStore>
</profile>

The ESB will use the custom keystore/truststore configs when connecting to the servers defined under the profile.

> Add support for multiple SSL configurations
> -------------------------------------------
>
>                 Key: ESBJAVA-558
>                 URL: https://wso2.org/jira/browse/ESBJAVA-558
>             Project: WSO2 ESB
>          Issue Type: Improvement
>          Components: Core Engine, Endpoints Management
>    Affects Versions: 1.7
>            Reporter: Kevin Treacy
>            Assignee: Hiranya Jayathilaka
>
> Posted in forum: http://wso2.org/forum/thread/3928
> It appears that the WSO2 ESB supports a single SSL configuration (key-store/trust-store) for the HTTPS transport sender that is registered in the axis2.xml file. Is it possible to have multiple SSL configurations at the endpoint or proxy level? The scenario that we need to support is that all the web services that the ESB will proxy will only be accessible over HTTPS and will all require HTTPS with mutual authentication (a.k.a. client certs) as the authentication mechanism. Each endpoint may require a different client cert, so the ESB must be able to present multiple identities

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

_______________________________________________
Esb-java-dev mailing list
Esb-java-dev@...
https://wso2.org/cgi-bin/mailman/listinfo/esb-java-dev

     [ https://wso2.org/jira/browse/ESBJAVA-558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hiranya Jayathilaka resolved ESBJAVA-558.
-----------------------------------------

    Fix Version/s: 2.2
       Resolution: Fixed

Improvement has been implemented in Synapse and hence will be available for ESB future releases.

> Add support for multiple SSL configurations
> -------------------------------------------
>
>                 Key: ESBJAVA-558
>                 URL: https://wso2.org/jira/browse/ESBJAVA-558
>             Project: WSO2 ESB
>          Issue Type: Improvement
>          Components: Core Engine, Endpoints Management
>    Affects Versions: 1.7
>            Reporter: Kevin Treacy
>            Assignee: Hiranya Jayathilaka
>             Fix For: 2.2
>
>
> Posted in forum: http://wso2.org/forum/thread/3928
> It appears that the WSO2 ESB supports a single SSL configuration (key-store/trust-store) for the HTTPS transport sender that is registered in the axis2.xml file. Is it possible to have multiple SSL configurations at the endpoint or proxy level? The scenario that we need to support is that all the web services that the ESB will proxy will only be accessible over HTTPS and will all require HTTPS with mutual authentication (a.k.a. client certs) as the authentication mechanism. Each endpoint may require a different client cert, so the ESB must be able to present multiple identities

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

_______________________________________________
Esb-java-dev mailing list
Esb-java-dev@...
https://wso2.org/cgi-bin/mailman/listinfo/esb-java-dev