December 11, 2013

JBoss Vault in JBoss EAP 6.2.0 uses jceks as Default KeyStore Type

Today I upgraded to JBoss EAP 6.2.0, but ran into some trouble with the keystore I have. I have one for the SSL connector and one for the JBoss Vault.

To be able keep you old JBoss Vault keystore that is stored with the jks format you need to add the KEYSTORE_TYPE vault option.

</extensions>
<vault>
    <vault-option name="KEYSTORE_URL" value="/your/absolute/path/vault/vault.keystore"/>
    <vault-option name="KEYSTORE_PASSWORD" value="MASK-3/VY6BIQ1KQ9LdJmX8m9Vn"/>
    <vault-option name="KEYSTORE_ALIAS" value="vault"/>
    <vault-option name="SALT" value="12345678"/>
    <vault-option name="ITERATION_COUNT" value="45"/>
    <vault-option name="ENC_FILE_DIR" value="/your/absolute/path/vault/"/>
    <vault-option name="KEYSTORE_TYPE" value="jks"/>
</vault>
<management>

Reference

No comments: