[
https://issues.apache.org/jira/browse/ARTEMIS-4528?focusedWorklogId=894564&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-894564
]
ASF GitHub Bot logged work on ARTEMIS-4528:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 07/Dec/23 17:33
Start Date: 07/Dec/23 17:33
Worklog Time Spent: 10m
Work Description: gtully commented on code in PR #4706:
URL: https://github.com/apache/activemq-artemis/pull/4706#discussion_r1419342013
##########
artemis-server/src/main/java/org/apache/activemq/artemis/core/server/impl/ActiveMQServerImpl.java:
##########
@@ -472,6 +474,8 @@ public ActiveMQServerImpl(Configuration configuration,
ConfigurationUtils.validateConfiguration(configuration);
}
+ Security.addProvider(new PemKeyStoreProvider());
Review Comment:
agree, thanks. This could also be left to jdk config, but it is easier for
users to have it loaded on demand. I have pulled it into SSLSupport in core
client and it is now registered on first use when PEM is requested, the added
benefit of making it optional for the osgi bits.
Issue Time Tracking
-------------------
Worklog Id: (was: 894564)
Time Spent: 1h 20m (was: 1h 10m)
> TLS support PEM format for key and trust store type
> ---------------------------------------------------
>
> Key: ARTEMIS-4528
> URL: https://issues.apache.org/jira/browse/ARTEMIS-4528
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Components: Configuration
> Affects Versions: 2.31.0
> Reporter: Gary Tully
> Assignee: Gary Tully
> Priority: Major
> Fix For: 2.32.0
>
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> managing key and trust store passwords when the credentials are securely
> stored or managed by other means is a nuisance.
> there is a nice PEM keystore provider at:
> [https://github.com/ctron/pem-keystore]
> This gives us an intuitive way to easily reference a simple cert or key
> without a password as is the case with jsk or pkcs12
> <acceptor
> name="netty-ssl-acceptor">tcp://localhost:5500?sslEnabled=true;keyStorePath=server-keystore.pem;keyStoreType=PEM</acceptor>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
