You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Alex Rudyy (JIRA)" <ji...@apache.org> on 2018/03/20 13:30:00 UTC

[jira] [Comment Edited] (QPID-8016) [Broker-J] FileKeyStore alias does not select the correct certificate

    [ https://issues.apache.org/jira/browse/QPID-8016?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16406324#comment-16406324 ] 

Alex Rudyy edited comment on QPID-8016 at 3/20/18 1:29 PM:
-----------------------------------------------------------

The changes look releasable to me. Shall we port it into 6.1.x as well?


was (Author: alex.rufous):
The changes look releasable to me. Shall we port it into 6.1.x as well

> [Broker-J] FileKeyStore alias does not select the correct certificate
> ---------------------------------------------------------------------
>
>                 Key: QPID-8016
>                 URL: https://issues.apache.org/jira/browse/QPID-8016
>             Project: Qpid
>          Issue Type: Bug
>          Components: Broker-J
>    Affects Versions: qpid-java-6.1, qpid-java-broker-7.0.0
>            Reporter: Keith Wall
>            Priority: Major
>             Fix For: qpid-java-broker-7.0.3
>
>
> Keystore provider implementation {{FileKeyStore}} has a {{#certificateAlias}} attribute that is supposed to select a single certificate for use from a store that has many.   This feature does not currently work. It seems that the last certificate is chosen regardless of the alias specified by the user. 
> I reproduced this problem with test resource at {{test-profiles/test_resources/ssl/java_client_keystore.jks}}. It contains two non-CA certs app1 and app2.  app2 was always presented over the TLS enabled socket, regardless of the setting of the {{certificateAlias}}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org