Set up SSL in JBoss fuse 6.1

While using FUSE ESB you might have the need of running a ESB over https.This small tutorial will help you on how to configure . This is applicable for Apache Servicemix and JBOSS FUSE ESB .I’ll refer to it as esb/etc but what I mean here is for example is home\jboss-fuse-6.1.0.redhat-379\etc.

Here are the steps to configure the SSL .

1. open org.ops4j.pax.web.cfg file present in <ESB>\etc folder.
2. Edit the file and make it as mentioned below.org.osgi.service.http.enabled=false

   org.osgi.service.http.secure.enabled=true
   org.osgi.service.http.port.secure=8443

   org.ops4j.pax.web.ssl.keystore=etc/jbossfuse-dev.jks

   org.ops4j.pax.web.ssl.keystore.type=JKS
   org.ops4j.pax.web.ssl.password=password
   org.ops4j.pax.web.ssl.keypassword=password

3. jbossfuse-dev.jks is keystore and contains key for SSL. Click here to generate the keystore
4. Now, Open jetty.xml file from same location and make changes mentioned below.

5. <br />
     &lt;Call name=&quot;addConnector&quot;&gt;<br />
    &lt;Arg&gt;<br />
    &lt;!-- The SslSelectChannelConnector class uses the Java NIO SslEngine --&gt;<br />
    &lt;New class=&quot;org.eclipse.jetty.server.ssl.SslSelectChannelConnector&quot;&gt;<br />
    &lt;Arg&gt;<br />
    &lt;New class=&quot;org.eclipse.jetty.http.ssl.SslContextFactory&quot;&gt;<br />
    &lt;!-- Protect against the POODLE security vulnerability --&gt;<br />
    &lt;Set name=&quot;ExcludeProtocols&quot;&gt;<br />
    &lt;Array type=&quot;java.lang.String&quot;&gt;<br />
    &lt;Item&gt;SSLv3&lt;/Item&gt;<br />
    &lt;/Array&gt;<br />
    &lt;/Set&gt;<br />
    &lt;Set name=&quot;keyStore&quot;&gt;etc/jbossfuse-dev.jks&lt;/Set&gt;<br />
    &lt;Set name=&quot;keyStorePassword&quot;&gt;password&lt;/Set&gt;<br />
    &lt;Set name=&quot;keyManagerPassword&quot;&gt;password&lt;/Set&gt;<br />
    &lt;/New&gt;<br />
    &lt;/Arg&gt;<br />
    &lt;Set name=&quot;port&quot;&gt;8443&lt;/Set&gt;<br />
    &lt;Set name=&quot;maxIdleTime&quot;&gt;30000&lt;/Set&gt;<br />
    &lt;/New&gt;<br />
    &lt;/Arg&gt;<br />
    &lt;/Call&gt;<br />
   

6. now restart the ESB & deploy your application .It should open at https://127.0.0.1:8443/cxf
7. 
8. That’s all required to configure SSL.

Conclusion

It’s important to enable SSL for Joss fuse ESB so that you can also call secure services in your local environment instead of mocking them .