Details
-
Feature
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
2.0.0
-
None
Description
Current Situation
- The Controller and Agent make use of a keystore for server and client authentication certificates (private keys).
- A keystore can hold any number of private keys. There is no reasonable mechanism in Java to auto-select the matching private key from a keystore.
Desired Behavior
- JS7 Controller and Agent should allow from the configuration in the private.conf file to optionally specify the alias name of the certificate to be used.
- The setting is made with js7.web.https.keystore.alias = "ALIAS"
Example
js7 { web { # Locations of keystore and truststore files for HTTPS connections https { keystore { # Default: ${js7.config-directory}"/private/https-keystore.p12" file=${js7.config-directory}"/private/https-keystore.p12" key-password=jobscheduler store-password=jobscheduler # optional alias alias=jobscheduler } } } }
- The setting is made with js7.web.https.keystore.alias = "ALIAS"
- The KeyStore class should be provided the alias name found in the private.conf file.
Attachments
Issue Links
- is related to
-
JOC-1379 Use key alias to access the private key of a keystore
- Released