This may help in some testing scenarios, or in the future if other authorities besides Let’s Encrypt support the ACME protocol. The certificate authority used by a certificate-authority-account resource is now configurable. Support for masking passwords in an Elytron client’s XML configuration was added.

This would be needed in the case where the principal stored in the authentication realm is different from the principal stored in the authorization realm(s). The Elytron subsystem’s aggregrate security realms now support transforming the principal in between loading the authentication identity and loading the authorization identity. The high level CLI security commands ( ssl enable-ssl-management and ssl enable-ssl-http-server) have been enhanced to support obtaining certificates from the Let’s Encrypt certificate authority. The Elytron subsystem now supports loading the attributes of an identity using multiple security realms and aggregating the results together into a single identity.

Mapping of an X509 Certificate to the underlying identity has been enhanced.

database systems are widely used in enterprise Java applications. SSL certificate revocation using OCSP is now supported.Įlytron audit logging now supports RFC5424/RFC3164 and also allows the administrator to configure the number of reconnect attempts. Get OJDBC jar: Download the latest ojdbc jar (For me it is ojdbc8.

Jdk 18 download