[
https://issues.apache.org/jira/browse/AMQ-9753?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18015482#comment-18015482
]
Matt Pavlovich edited comment on AMQ-9753 at 8/21/25 5:13 PM:
--------------------------------------------------------------
[~jbonofre] I think the easiest thing would be to support injecting a fully
populated sslContext into networkConnector/transportConnector directly.
There is a lot of client/broker-side mixing of how SSL setup is handled and it
relies on ThreadLocal (which we need to remove).
Approximately like this:
{noformat}
<transportConnector uri="foo.." >
<sslContext keyStore="conf/keystore.ks" .. />
</transportConnector>
{noformat}
was (Author: mattrpav):
[~jbonofre] I think the easiest thing would be to support injecting a fully
populated sslContext into networkConnector/transportConnector directly.
There is a lot of client/broker-side mix of how SSL setup is handled and it
relies on ThreadLocal (which we need to remove).
Approximately like this:
{noformat}
<transportConnector uri="foo.." >
<sslContext keyStore="conf/keystore.ks" .. />
</transportConnector>
{noformat}
> Support SSLContext per-transportConnector and per-networkConnector
> ------------------------------------------------------------------
>
> Key: AMQ-9753
> URL: https://issues.apache.org/jira/browse/AMQ-9753
> Project: ActiveMQ Classic
> Issue Type: New Feature
> Reporter: Matt Pavlovich
> Assignee: Matt Pavlovich
> Priority: Minor
> Fix For: 6.2.0
>
>
> This refactor will update how SSLContext is referenced and managed.
> 1. Ability to directly inject a fully-configured SSLContext to a
> transportConnector or networkConnector
> 2. TransportConnector and NetworkConnector will first look for local
> SSLContext and fallback to Broker-wide SSLContext when not explicitly
> specified.
> Also, moving away from ThreadLocal usage will better prepare for JDK 21+
> usage.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
