16 - ORB Subsystem - Security-Domain Set

Information

The AS 7 ORB implementation can be secured by enabling SSL encryption in the JacORB subsystem.

Solution

To enable this in JacORB setup the tags security-domain and security:

<subsystem xmlns="urn:jboss:domain:jacorb:1.1">
<orb>
<initializers security="on" transactions="spec"/>
</orb>
<security support-ssl="on" security-domain="ssl-domain"/>
</subsystem>

See Also

https://docs.jboss.org/author/display/AS72/Hardening+Guidelines

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-13

Plugin: Unix

Control ID: 2b9f65251e6b219eb29fa0a9da9b9858f36878f424fca5dea335f7bdea040f19