[
https://issues.apache.org/jira/browse/OAK-9473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17368942#comment-17368942
]
Axel Hanikel edited comment on OAK-9473 at 6/24/21, 3:54 PM:
-------------------------------------------------------------
Attaching a patch for adding the option to configure a password in OSGi which
can decrypt encrypted SSL keys.
Additionally I've renamed the configuration options {{sslServerSubjectPattern}}
and {{sslClientSubjectPattern}} into a single {{sslSubjectPattern}} because we
never need both in the same instance. I hope it's still ok to do that change
given that we haven't had an Oak release since these were introduced.
I've also created a PR at https://github.com/apache/jackrabbit-oak/pull/301
[~adulceanu] Would you like to have a look? Thanks!
was (Author: ahanikel):
Attaching a patch for adding the option to configure a password in OSGi which
can decrypt encrypted SSL keys.
Additionally I've renamed the configuration options {sslServerSubjectPattern}
and {sslClientSubjectPattern} into a single {sslSubjectPattern} because we
never need both in the same instance. I hope it's still ok to do that change
given that we haven't had an Oak release since these were introduced.
I've also created a PR at https://github.com/apache/jackrabbit-oak/pull/301
[~adulceanu] Would you like to have a look? Thanks!
> [Cold Standby] Add configuration option for SSL key decryption password
> -----------------------------------------------------------------------
>
> Key: OAK-9473
> URL: https://issues.apache.org/jira/browse/OAK-9473
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Components: segment-tar
> Reporter: Axel Hanikel
> Priority: Major
> Attachments:
> 0001-OAK-9473-Cold-Standby-configure-decryption-password-.patch
>
>
> We also want to be able to use encrypted keys for cold standby SSL
> connections. The password would then be stored and fetched from the OSGi
> config.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
