[jira] Commented: (GERONIMO-2342) Can't change keystore type for Jetty

["Aaron Mulder (JIRA)" <ji...@apache.org>]

    [ http://issues.apache.org/jira/browse/GERONIMO-2342?page=comments#action_12445426 ] 
            
Aaron Mulder commented on GERONIMO-2342:
----------------------------------------

The easiest thing would be to disable the SSL connector (add load="false" to the SSL connector GBean entry in config.xml) to start Geronimo.  Then configure the new keystore, and either add a new SSL connector or edit the old SSL connector to point to the new keystore.

However, I think we need to add an argument to KeystoreManager.createKeystore, and a new attribute to FileKeystoreInstance, to let you specify the Keystore type (currently it's hardcoded to JKS).

> Can't change keystore type for Jetty
> ------------------------------------
>
>                 Key: GERONIMO-2342
>                 URL: http://issues.apache.org/jira/browse/GERONIMO-2342
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: Jetty
>    Affects Versions: 1.1.1
>            Reporter: Nellya Udovichenko
>            Priority: Minor
>
> I've tried to replace Jetty SSL keystore type, for example, with PKCS12, by adding the parameter to config.xml (like I did with Tomcat):
> ...
> <gbean name="JettySSLConnector">
>     <attribute name="keystoreType">PKCS12</attribute>
>     <attribute name="host">0.0.0.0</attribute>
>     <attribute name="port">8443</attribute>
> </gbean>
> ...
>  
> and got the following error log:
>  [*********>            ] 43%  72s Startup failed
> org.apache.geronimo.kernel.config.LifecycleException: start of geronimo/jetty/1.1/car failed
>         at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:529)
> ...
> Caused by: java.lang.IllegalStateException: Attribute is not persistent Attribute Name: keystoreType, Type: class java.lang.String, GBeanInstance: Jetty Connector HTTPS
>         at org.apache.geronimo.gbean.runtime.GBeanAttribute.setPersistentValue(GBeanAttribute.java:355)
>         at org.apache.geronimo.gbean.runtime.GBeanInstance.setAttribute(GBeanInstance.java:749)
>         at org.apache.geronimo.gbean.runtime.GBeanInstance.<init>(GBeanInstance.java:367)
>         ... 17 more

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira