Re: TLS key management

2019-11-12 Thread Mark Thomas
On 11/11/2019 23:40, George Stanchev wrote: > Currently, (in most cases) Tomcat creates an in-memory keystore and > initializes kmf as follows: > KeyManagementFactory.getInstance(algo).init(keystore, kspass). The in-memory > keystore has the key, the certificate and the chain and nothing else.

TLS key management

2019-11-11 Thread George Stanchev
Currently, (in most cases) Tomcat creates an in-memory keystore and initializes kmf as follows: KeyManagementFactory.getInstance(algo).init(keystore, kspass). The in-memory keystore has the key, the certificate and the chain and nothing else. This works fine in most cases but we've ran into a