You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2003/05/02 21:23:37 UTC

DO NOT REPLY [Bug 19610] New: - Tomcat does not support a keystore with multiple keys with different passwords for each key

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19610>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19610

Tomcat does not support a keystore with multiple keys with different passwords for each key

           Summary: Tomcat does not support a keystore with multiple keys
                    with different passwords for each key
           Product: Tomcat 5
           Version: 5.0.0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: mike@slac.com


Similar to bug 1400 in Tomcat 4.0 bug database...  I strongly disagree with
the "WONT FIX" reason.

I and many others strongly need tomcat to use keystores like they were suppose 
to be used, i.e. have support for keyaliases and a different keypass for each 
key then the password for the actual keystore.   Porting a J2EE web app from 
Weblogic 8 to TomCat/JBoss isn't clean at all... because I have to end up 
creating TWO keystores... one for Tomcat to use to get the SSL
keys... and one for my application to use.

Tomcat should be able to support a keystore with more than one key each key 
differentiated by a keyalias and a seperate keypassword.  Right now, you can 
only have one key... and the alias must be 'tomcat' and the password must be 
the same as the keystore itself.  That is simply not right!

Again refer to bug 1400 for more details

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org