[
https://issues.apache.org/jira/browse/QPID-8775?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Partha Sarathy Maripini updated QPID-8775:
------------------------------------------
Description:
* SSLUtil#generateSelfSignedCertificate builds a CertificateRequest and
delegates to the selected CertificateGenerator. The static BouncyCastleProvider
field and all Bouncy Castle imports are removed from SSLUtil, and the method
now throws GeneralSecurityException.
* AutoGeneratedSelfSignedKeyStoreImpl is always registered: a keystore whose
certificate is already stored loads without a generator, while creating or
regenerating one without a generator fails with a message that gives the reason.
was:
*Background:*
SSLUtil#generateSelfSignedCertificate currently instantiates Bouncy Castle
generator classes directly and relies on default provider fallback.
*Tasks:*
1. Replace static Bouncy Castle invocations in SSLUtil with dynamic lookup via
QpidServiceLoader / PluggableFactoryLoader.
2. Refactor AutoGeneratedSelfSignedKeyStoreImpl to invoke the generator
discovered through the SPI.
3. Remove static PROVIDER string fields and direct class bindings from SSLUtil.
*Acceptance Criteria:*
- SSLUtil delegates certificate generation to the discovered
CertificateGeneratorProvider.
- Hardcoded Bouncy Castle class instantiations are removed from SSLUtil.
> [Broker-J] Refactor SSLUtil to dynamically resolve certificate generator via
> QpidServiceLoader
> ----------------------------------------------------------------------------------------------
>
> Key: QPID-8775
> URL: https://issues.apache.org/jira/browse/QPID-8775
> Project: Qpid
> Issue Type: Sub-task
> Components: Broker-J
> Reporter: Partha Sarathy Maripini
> Priority: Major
>
> * SSLUtil#generateSelfSignedCertificate builds a CertificateRequest and
> delegates to the selected CertificateGenerator. The static
> BouncyCastleProvider field and all Bouncy Castle imports are removed from
> SSLUtil, and the method now throws GeneralSecurityException.
> * AutoGeneratedSelfSignedKeyStoreImpl is always registered: a keystore whose
> certificate is already stored loads without a generator, while creating or
> regenerating one without a generator fails with a message that gives the
> reason.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
