Enabling SSL for the mod_cluster management channel

In this section, we will learn how to secure the MCMP channel. This means that the MCMP messages will be transferred over SSL.


In the mod_cluster documentation, we named the protocol MCMP, which stands for Mod-Cluster Management Protocol.

In design, mod_cluster uses SSL mutual authentication to secure the MCMP channel. This means that we must create certificates for both the servers. EAP6 needs to trust the certificate provided by httpd; meanwhile, httpd must trust the certificate from the EAP6 server. So, we need two certificates instead of just one.

An introduction to SSL mutual authentication

In the previous chapter, we created a self-signed certificate for httpd to enable HTTPS communication ...

Get JBoss EAP6 High Availability now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.