[jboss-jira] [JBoss JIRA] (WFLY-7158) Working with multiple keys in key store

Jan Kalina (JIRA) issues at jboss.org
Thu Jan 19 10:45:00 EST 2017


    [ https://issues.jboss.org/browse/WFLY-7158?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13351193#comment-13351193 ] 

Jan Kalina edited comment on WFLY-7158 at 1/19/17 10:44 AM:
------------------------------------------------------------

The attribute *alias-filter* was not added in the end.
[~pskopek] has added this feature (specifying which alias from keystore to use) as *credential-reference* (attribute *alias*) instead.
See https://github.com/wildfly-security/elytron-subsystem/blob/master/src/test/resources/org/wildfly/extension/elytron/tls-test.xml#L36


was (Author: honza889):
The attribute *alias-filter* was not added in the end.
@pskopek has added this feature (specifying which alias from keystore to use) as *credential-reference* (attribute *alias*) instead.
See https://github.com/wildfly-security/elytron-subsystem/blob/master/src/test/resources/org/wildfly/extension/elytron/tls-test.xml#L36

> Working with multiple keys in key store
> ---------------------------------------
>
>                 Key: WFLY-7158
>                 URL: https://issues.jboss.org/browse/WFLY-7158
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Martin Choma
>            Assignee: Jan Kalina
>            Priority: Critical
>             Fix For: 11.0.0.Alpha1
>
>
> In case when 2 keys are present in keystore, then alias-filter (filtering into single key) on key-store resource has to be specified, otherwise key-manager can't be created. If user want to use keystore with multiple keys, user has to configure multiple key-store elements with specified alias-filter (filtering into single key).
> That is pretty inconvinient. Probably introducing *alias attribute on key-manager* would be more intuitive solution to this situation.
> {code}
> /subsystem=elytron/key-managers=server:add(key-store=server,algorithm="SunX509",password=key-password)
> {code}



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list