Re: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-07-05 Thread Mark Thomas
On 05/07/17 11:47, Frank Taffelt wrote: >> I don't think that will work because you can't read the key out of the >> keystore. > > The keystore API has the getKey(alias,keypass) method that should give you > the key. copying the entry could be: > > KeyStore newks = KeyStore.getInstance("JKS");

RE: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-07-05 Thread Frank Taffelt
> I don't think that will work because you can't read the key out of the > keystore. The keystore API has the getKey(alias,keypass) method that should give you the key. copying the entry could be: KeyStore newks = KeyStore.getInstance("JKS"); newks.load(null, null); newks.setKeyEntry(alias,

Re: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-07-05 Thread Mark Thomas
On 04/07/2017 07:32, Frank Taffelt wrote: > Hi Thomas, > >> By far the simplest solution is to have one keystore per private key. > > so maybe this could go into the docs section. Updated. Will be included in the next release (not the one currently being voted on). >> I find the JSSE API

RE: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-07-04 Thread Frank Taffelt
Hi Thomas, > By far the simplest solution is to have one keystore per private key. so maybe this could go into the docs section. > I find the JSSE API tricky to navigate at the best of times so it is possible > I have missed something. If I have, feel free to point me in the right > direction.

Re: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-07-03 Thread Mark Thomas
On 30/06/17 13:43, Frank Taffelt wrote: > Hi all, > > while playing with some ssl setups i stumbled upon the following behaviour > that seems like bug to me ? > As long as all keyentries in a keystore have the same password all is fine. > Using entries with different password tomcat doesnt

RE: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-07-03 Thread Frank Taffelt
Hi Christopher, > > # create 2 entries with different keypass for each entry keytool > > -genkeypair -alias tomcat1 -storepass storepass -keystore > > different.jks -keyalg RSA -keypass tomcat1 -ext san=dns:tomcat1 > > -dname CN=tomcat1 keytool -genkeypair -alias tomcat2 -storepass > >

Re: Tomcat 8.5.16 - can't use Java keystore with multiple entries having different keypass for each entry?

2017-06-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Frank, On 6/30/17 8:43 AM, Frank Taffelt wrote: > Hi all, > > while playing with some ssl setups i stumbled upon the following > behaviour that seems like bug to me ? As long as all keyentries in > a keystore have the same password all is fine.