ISPN-13080 Infnispan SSL encryption and certificate authorization tutorial

[wfink]

Tutorial with self created keystores
https://issues.redhat.com/browse/ISPN-13123

[oraNod]

@wfink Can you please take a look at wfink#1 ?

[pruivo]

my thoughts:

• too many manual steps.

1. The scripts can be executed from maven (i.e. mvn package generates whatever it needs)
2. create an infinispan.xml for each test case and the cache required
3. the only manual step should be to copy all certificates and infinispan.xmls to server/conf (create a script to help? copy-configuration.sh)
4. the user can start the server with ./bin/server.sh -c <config-name> where <config-name> depends on the test to run.

• Scripts should not ask for passwords :) Use -keypass my_secret_pass where required to avoid prompt for passwords

[wfink]

my thoughts:

* too many manual steps.

provide infinispan.xml could restrict the use as it might fail if the user start a different version of infinispan.
Creating the config manually give more practice.
Also there are some steps where the certificats are modified during the different steps to show the behavior and possible errors

[pruivo]

the infinispan version is not a problem since we have a branch for each version.

[karesti]

@wfink needs rebase

[wfink]

I'm about to fix some minor issues and integrate Pedro's comments.
I'll rebase then

[pruivo]

@wfink my changes are in a separate branch: 98b1759

• mvn package generates the certificates (no password prompts)
• mvn clean removes the certificates
• to run the tutorial, use mvn exec:exec@run

use whatever you like 👍

[oraNod]

Got this exception in logs:

ISPN005003: Exception reported java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [anonymous, CN=Client2, OU=Infinispan, O=JBoss, L=Red Hat, InetAddressPrincipal [address=127.0.0.1/127.0.0.1]]' lacks 'WRITE' permission

If this is expected, we should explain to users.

[oraNod]

@wfink I ran all the examples successfully and, overall, it was a much easier process with Pedro's changes. There are a few nits for clarity in some comments. Can you apply the changes or would you prefer if I sent another commit?

[oraNod]

LGTM. Thanks for the hard work on this one @wfink