[jboss-jira] [JBoss JIRA] (ELY-118) Reloadable File-backed KeyStore

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/ELY-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032051#comment-13032051 ] 

Darran Lofthouse commented on ELY-118:
--------------------------------------

On demand reload instead of dynamic reload may also be a consideration - although that could be accomplished within the subsystem by recreating it anyway.

> Reloadable File-backed KeyStore
> -------------------------------
>
>                 Key: ELY-118
>                 URL: https://issues.jboss.org/browse/ELY-118
>             Project: WildFly Elytron
>          Issue Type: Enhancement
>          Components: KeyStores
>            Reporter: David Lloyd
>            Assignee: Darran Lofthouse
>             Fix For: 1.0.0.Alpha1
>
>
> File-backed keystores can generically be made reloadable.  This can be done by creating a KeyStore wrapper which contains an {{AtomicReference<KeyStore>}}.  The wrapper also has a file name reference, and will initialize itself from that file.  It would use an NIO.2 file watcher to monitor the file for changes; when the file is changed, the watcher attempts to re-load the file into a new KeyStore instance (using cached protection parameters).  If successful, the new KeyStore replaces the old one atomically, providing atomic and clean real-time update capability.



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)