[jboss-remoting-issues] [JBoss JIRA] Created: (JBREM-1172) SSLSocketBuilder should allow keystore and truststore URLs to be "NONE"

[Ron Sigal (JIRA)]

SSLSocketBuilder should allow keystore and truststore URLs to be "NONE"
-----------------------------------------------------------------------

                 Key: JBREM-1172
                 URL: https://jira.jboss.org/jira/browse/JBREM-1172
             Project: JBoss Remoting
          Issue Type: Bug
      Security Level: Public (Everyone can see)
    Affects Versions: 2.5.2 (Flounder), 2.2.3.SP1
            Reporter: Ron Sigal
            Assignee: Ron Sigal
             Fix For: 2.2.3.SP2, 2.5.2.SP1 (Flounder)


Some Java Cryptography Extension (JCE) providers support hardware based key and truststores, such as PKCS#12 Smartcards.  Rather than specify URLs for keystores and truststores, the Java Secure Socket Extension (JSSE)
Reference Guide (http://java.sun.com/j2se/1.5.0/docs/guide/security/jsse/JSSERefGuide.html) specifies that string "NONE" should be used.  org.jboss.remoting.security.SSLSocketBuilder is unable to handler "NONE", and it throws a NullStoreURLException if no keystore or truststore (in the case that a truststore is necessary) is configured.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira