[ http://issues.apache.org/jira/browse/GERONIMO-2342?page=comments#action_12445426 ] Aaron Mulder commented on GERONIMO-2342: ----------------------------------------
The easiest thing would be to disable the SSL connector (add load="false" to the SSL connector GBean entry in config.xml) to start Geronimo. Then configure the new keystore, and either add a new SSL connector or edit the old SSL connector to point to the new keystore. However, I think we need to add an argument to KeystoreManager.createKeystore, and a new attribute to FileKeystoreInstance, to let you specify the Keystore type (currently it's hardcoded to JKS). > Can't change keystore type for Jetty > ------------------------------------ > > Key: GERONIMO-2342 > URL: http://issues.apache.org/jira/browse/GERONIMO-2342 > Project: Geronimo > Issue Type: Bug > Security Level: public(Regular issues) > Components: Jetty > Affects Versions: 1.1.1 > Reporter: Nellya Udovichenko > Priority: Minor > > I've tried to replace Jetty SSL keystore type, for example, with PKCS12, by > adding the parameter to config.xml (like I did with Tomcat): > ... > <gbean name="JettySSLConnector"> > <attribute name="keystoreType">PKCS12</attribute> > <attribute name="host">0.0.0.0</attribute> > <attribute name="port">8443</attribute> > </gbean> > ... > > and got the following error log: > [*********> ] 43% 72s Startup failed > org.apache.geronimo.kernel.config.LifecycleException: start of > geronimo/jetty/1.1/car failed > at > org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:529) > ... > Caused by: java.lang.IllegalStateException: Attribute is not persistent > Attribute Name: keystoreType, Type: class java.lang.String, GBeanInstance: > Jetty Connector HTTPS > at > org.apache.geronimo.gbean.runtime.GBeanAttribute.setPersistentValue(GBeanAttribute.java:355) > at > org.apache.geronimo.gbean.runtime.GBeanInstance.setAttribute(GBeanInstance.java:749) > at > org.apache.geronimo.gbean.runtime.GBeanInstance.<init>(GBeanInstance.java:367) > ... 17 more -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
