Enabling SSL for the mod_cluster management channel
In this section, we will learn how to secure the MCMP channel. This means that the MCMP messages will be transferred over SSL.
Tip
In the mod_cluster documentation, we named the protocol MCMP, which stands for Mod-Cluster Management Protocol.
In design, mod_cluster uses SSL mutual authentication to secure the MCMP channel. This means that we must create certificates for both the servers. EAP6 needs to trust the certificate provided by httpd; meanwhile, httpd must trust the certificate from the EAP6 server. So, we need two certificates instead of just one.
An introduction to SSL mutual authentication
In the previous chapter, we created a self-signed certificate for httpd to enable HTTPS communication ...
Get JBoss EAP6 High Availability now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
