Hi,
I've just pushed the initial implementation for Bug 840403 in a topic
branch:
https://git.fedorahosted.org/cgit/rhq/rhq.git/commit/?h=bug/840403&id...
* I have manually tested different versions of AS7 / EAP6 in Standalone
and Domain modes (including content upload).
* API check passes
* Client Certification authentication support is not implemented yet
* Only valid certificates or self-signed certificates (certificate chain
size is 1) are supported now
AS7 plugin must be able to work with self-signed certificates and
unknown certificate authorities (internal or not common). It also needs
to be able to find a key store for client cert authentication.
I think Standalone and Domain server plugin configurations should let
users define a key and a trust store for maximum customization.
I believe that, by default, self-signed certificates and unknown
certificate authorities should not be trusted.
What do you think?
Thanks,
Thomas