[
https://issues.apache.org/jira/browse/QPID-4739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13630262#comment-13630262
]
Robbie Gemmell commented on QPID-4739:
--------------------------------------
Change made on trunk at http://svn.apache.org/r1467334 after review by myself
and Alex.
> [Java Broker] complete functionality to configure multiple key store and
> trust stores and assign them per-port
> --------------------------------------------------------------------------------------------------------------
>
> Key: QPID-4739
> URL: https://issues.apache.org/jira/browse/QPID-4739
> Project: Qpid
> Issue Type: Improvement
> Components: Java Broker
> Affects Versions: 0.21
> Reporter: Robbie Gemmell
> Assignee: Robbie Gemmell
> Fix For: 0.22
>
>
> As part of the work in QPID-4390 to overhaul the broker configuration and
> allow manipulation via the [HTTP] management interface, an intermediate step
> was made with the SSL configuration by only allowing configuration of a
> single SSL key store and trust store (and via QPID-4636 a 'peer store') as
> attributes on the broker itself for use by the AMQP and HTTP(S) ports, with
> the JMX port relying on the javax.ssl.* properties to configure its SSL key
> store.
> The desired configuration model, and the way it was represented internally to
> the broker and externally via the REST api, was for multiple key store and
> trust stores (which may now be 'peers only' trust stores) to be allowed as
> child objects of the broker. It was then also intended these would be able to
> be assigned for use on a per-port basis, including specifying the key store
> for the JMX port.
> This JIRA will make the necessary changes to transition the brokers SSL
> configuration to the intended model, updating the web management UI
> accordingly.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org
