]
Darran Lofthouse commented on ELY-118:
--------------------------------------
On demand reload instead of dynamic reload may also be a consideration - although that
could be accomplished within the subsystem by recreating it anyway.
Reloadable File-backed KeyStore
-------------------------------
Key: ELY-118
URL:
https://issues.jboss.org/browse/ELY-118
Project: WildFly Elytron
Issue Type: Enhancement
Components: KeyStores
Reporter: David Lloyd
Assignee: Darran Lofthouse
Fix For: 1.0.0.Alpha1
File-backed keystores can generically be made reloadable. This can be done by creating a
KeyStore wrapper which contains an {{AtomicReference<KeyStore>}}. The wrapper also
has a file name reference, and will initialize itself from that file. It would use an
NIO.2 file watcher to monitor the file for changes; when the file is changed, the watcher
attempts to re-load the file into a new KeyStore instance (using cached protection
parameters). If successful, the new KeyStore replaces the old one atomically, providing
atomic and clean real-time update capability.