[ 
https://issues.apache.org/jira/browse/CXF-6831?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Freeman Fang updated CXF-6831:
------------------------------
    Description: 
currently we have code like
{code}
final KeyStore keyStore =
            KeyStore.getInstance(KeyStore.getDefaultType());
{code}
to createTrustStore, here always use the KeyStore default type, however, 
KeyStore default type would change from "jks" to "pkcs12" in java9(see the 
keystore.type property in java.security), that said, the 
KeyStore.getDefaultType() can't keep constant between different java versions, 
this can cause SSL shake hand failed. we should enable the certStore type 
configuration, just like the keyStore do 

  was:
currently we have code like
{code}
final KeyStore keyStore =
            KeyStore.getInstance(KeyStore.getDefaultType());
{code}
to createTrustStore, here always use the KeyStore default type, however, 
KeyStore default type would change from "jks" to "pkcs12" in java9, that said, 
the KeyStore.getDefaultType() can't keep constant between different java 
versions, this can cause SSL shake hand failed. we should enable the certStore 
type configuration, just like the keyStore do 


> should be able to configure the certStore key type
> --------------------------------------------------
>
>                 Key: CXF-6831
>                 URL: https://issues.apache.org/jira/browse/CXF-6831
>             Project: CXF
>          Issue Type: Improvement
>            Reporter: Freeman Fang
>            Assignee: Freeman Fang
>
> currently we have code like
> {code}
> final KeyStore keyStore =
>             KeyStore.getInstance(KeyStore.getDefaultType());
> {code}
> to createTrustStore, here always use the KeyStore default type, however, 
> KeyStore default type would change from "jks" to "pkcs12" in java9(see the 
> keystore.type property in java.security), that said, the 
> KeyStore.getDefaultType() can't keep constant between different java 
> versions, this can cause SSL shake hand failed. we should enable the 
> certStore type configuration, just like the keyStore do 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to