Mutual SSL in AEM

[Shallu_Rohilla]

In our current architecture we have our AEM author on JBoss server. The primary reason to do that was because AEM didn't provide capability for establishing Mutual SSL. Would want to know if in newer versions of AEM 6.3 or 6.5, can we establish Mutual SSL. If yes, can you please point to some documentation. This is required as we have to connect to services outside AEM. 

[Jaideep_Brar]

You can follow steps at [1] to configure replication with MSSL

[1] https://docs.adobe.com/content/help/en/experience-manager-65/deploying/configuring/mssl-replication....

[Shallu_Rohilla]

Hi, I am not looking for configuraing replication, this I have got. I am looking for Mutual SSL(MSSL) for consuming rest endpoints of other services.

[aemmarc · Accepted solution]

Personally -- I'd avoid Mutual SSL if possible.

We have encountered very difficult-to-diagnose-and-troubleshoot edge cases where Java will incorrectly select the wrong certificate.

Yet unresolved Java bug : JDK-8199440

https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8199440

[Shallu_Rohilla]

But this bug talks about JDK bug specifically do you have any use case for Mutual SSL.

[aemmarc]

what I'm saying is -- Adobe Customer Care has seen incidents with organizations who use Mutual SSL (always seems to be banks) where they encounter odd edge case scenarios where the Java JVM selects the wrong alias during handshake and this is leads to failed SSL connections.