{
"operation-name" : "add",
"description" : "Add the SSL context definition.",
"request-properties" : {
"authentication-optional" : {
"type" : {
"TYPE_MODEL_VALUE" : "BOOLEAN"
},
"description" : "Rejecting of the client certificate by the security domain will not prevent the connection. Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain. Has an effect only when the security domain is set.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : false,
"stability" : "default"
},
"cipher-suite-filter" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "The filter to apply to specify the enabled cipher suites for TLSv1.2 and below.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : "DEFAULT",
"stability" : "default"
},
"cipher-suite-names" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "The filter to apply to specify the enabled cipher suites for TLSv1.3.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"stability" : "default"
},
"final-principal-transformer" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "A final principal transformer to apply for this mechanism realm.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.principal-transformer",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"key-manager" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "Reference to the key manager to use within the SSLContext.",
"expressions-allowed" : false,
"required" : true,
"nillable" : false,
"capability-reference" : "org.wildfly.security.key-manager",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"maximum-session-cache-size" : {
"type" : {
"TYPE_MODEL_VALUE" : "INT"
},
"description" : "The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : -1,
"min" : -1,
"max" : 2147483647,
"stability" : "default"
},
"need-client-auth" : {
"type" : {
"TYPE_MODEL_VALUE" : "BOOLEAN"
},
"description" : "To require a client certificate on SSL handshake. Connection without trusted client certificate (see trust-manager) will be rejected.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : false,
"stability" : "default"
},
"post-realm-principal-transformer" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "A principal transformer to apply after the realm is selected.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.principal-transformer",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"pre-realm-principal-transformer" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "A principal transformer to apply before the realm is selected.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.principal-transformer",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"protocols" : {
"type" : {
"TYPE_MODEL_VALUE" : "LIST"
},
"description" : "The enabled protocols.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"min-length" : 1,
"max-length" : 2147483647,
"allowed" : [
"SSLv2",
"SSLv2Hello",
"SSLv3",
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"stability" : "default",
"value-type" : {
"TYPE_MODEL_VALUE" : "STRING"
}
},
"provider-name" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "The name of the provider to use. If not specified, all providers from providers will be passed to the SSLContext.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"providers" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "The name of the providers to obtain the Provider[] to use to load the SSLContext.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.providers",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"realm-mapper" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "The realm mapper to be used for SSL authentication.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.realm-mapper",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"security-domain" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "The security domain to use for authentication during SSL session establishment.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.security-domain",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"session-timeout" : {
"type" : {
"TYPE_MODEL_VALUE" : "INT"
},
"description" : "The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : -1,
"min" : -1,
"max" : 2147483647,
"stability" : "default"
},
"trust-manager" : {
"type" : {
"TYPE_MODEL_VALUE" : "STRING"
},
"description" : "Reference to the trust manager to use within the SSLContext.",
"expressions-allowed" : false,
"required" : false,
"nillable" : true,
"capability-reference" : "org.wildfly.security.trust-manager",
"min-length" : 1,
"max-length" : 2147483647,
"stability" : "default"
},
"use-cipher-suites-order" : {
"type" : {
"TYPE_MODEL_VALUE" : "BOOLEAN"
},
"description" : "To honor local cipher suites preference.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : true,
"stability" : "default"
},
"want-client-auth" : {
"type" : {
"TYPE_MODEL_VALUE" : "BOOLEAN"
},
"description" : "To request (but not to require) a client certificate on SSL handshake. If a security domain is referenced and supports X509 evidence, this will be set to true automatically. Ignored when need-client-auth is set.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : false,
"stability" : "default"
},
"wrap" : {
"type" : {
"TYPE_MODEL_VALUE" : "BOOLEAN"
},
"description" : "Should the SSLEngine, SSLSocket, and SSLServerSocket instances returned be wrapped to protect against further modification.",
"expressions-allowed" : true,
"required" : false,
"nillable" : true,
"default" : false,
"stability" : "default"
}
},
"reply-properties" : {},
"stability" : "default",
"read-only" : false,
"restart-required" : "resource-services",
"runtime-only" : false
}