[ 
https://issues.apache.org/jira/browse/GERONIMO-5156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838260#action_12838260
 ] 

Ashish Jain commented on GERONIMO-5156:
---------------------------------------

Here is how plan to address this:

1) Command to invoke the unlockKeystore functionality
deploy.bat unlockKeyStore <keyStoreName> <keyAlias1> <keyAlias2> 
.................

2) There can be 2 cases 
a) one is when user only want to unlock the keystore. In that case the command 
will be
deploy.bat unlockKeyStore <keyStoreName>

The password for keystore will have to be specified in the file pointing to 
org.apache.geronimo.keyStoreTrustStorePasswordFile.
See GERONIMO-4896 for more information on this system property.

b) User wants to unlock a keyStore and one or more private keys. In that case 
the command will be
deploy.bat unlockKeyStore <keyStoreName> <keyAlias1> <keyAlias2> 
.................

The password for keystore and private keys will have to be specified in the 
file pointing to org.apache.geronimo.keyStoreTrustStorePasswordFile.
See GERONIMO-4896 for more information on this system property.  here is how 
the file will look like
keyStorePassword=<Encrypted_KeyStorePassword>
keyAlias1=<Encrypted_keyAlias1Password>
keyAlias2=<Encrypted_keyAlias2Password>
.
.

This order of specifying the keyStore and aliases have to  be preserved,

Please suggest any improvements.



> Command line utility to unlock a keystore and private key
> ---------------------------------------------------------
>
>                 Key: GERONIMO-5156
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-5156
>             Project: Geronimo
>          Issue Type: New Feature
>      Security Level: public(Regular issues) 
>          Components: security
>         Environment: geronimo tomcat assembly
>            Reporter: Ashish Jain
>            Assignee: Ashish Jain
>             Fix For: 2.1.5, 2.2.1
>
>
> A command line utility to unlock a keystore and private key.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to