https://bz.apache.org/bugzilla/show_bug.cgi?id=58741

--- Comment #6 from Christopher Schultz <ch...@christopherschultz.net> ---
(In reply to Remy Maucherat from comment #4)
> It could be a good first step to test trunk. Since the keystore size itself
> shouldn't be a factor, try find some other more likely explanation first.
> 
> Both connectors use the same SSLEngine API, which is configured the same
> way, and once the key is loaded during the connector initialization the
> keystore is not used anymore.

That's only for server connector configuration. It's clear that Syed is talking
about handshakes which include a client-certificate, here. The trust store is
certainly consulted when a client-certificate needs to be verified.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to