[jboss-jira] [JBoss JIRA] (WFCORE-3075) KeyStore password as default KeyManager password

[Darran Lofthouse (Jira)]

    [ https://issues.jboss.org/browse/WFCORE-3075?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13675736#comment-13675736 ] 

Darran Lofthouse commented on WFCORE-3075:
------------------------------------------

As an enhancement doesn't need to be higher than major, presently zero votes for this.

> KeyStore password as default KeyManager password
> ------------------------------------------------
>
>                 Key: WFCORE-3075
>                 URL: https://issues.jboss.org/browse/WFCORE-3075
>             Project: WildFly Core
>          Issue Type: Enhancement
>          Components: Security
>            Reporter: Jan Kalina
>            Priority: Major
>              Labels: keymanager, keystore, trustmanager
>
> In Elytron, there is keystore password (key-store resource) and key password (key-managers resource) required. 
> However in theory there could be cases, where no password can be intended
> - key-store resource for truststore purposes (reading truststore) (but in legacy is password required)
> - PKCS12 can be created without key password (but keystore password in legacy is required)
> - you can create JKS programatically without keystore password
> - *in legacy key password is optional (which mean keystore password is used)*
> From discussion: We can make the password optional on the KeyManager so if no password is specified on the KeyManager we assume it is the one from the KeyStore.
> Created analysis document for this: https://developer.jboss.org/wiki/AnalysisDesign-KeyStorePasswordAsDefaultKeyManagerPassword



--
This message was sent by Atlassian Jira
(v7.12.1#712002)