[jira] [Commented] (OAK-9473) [Cold Standby] Add configuration option for SSL key decryption password

["Axel Hanikel (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OAK-9473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17368942#comment-17368942 ] 

Axel Hanikel commented on OAK-9473:
-----------------------------------

Attaching a patch for adding the option to configure a password in OSGi which can decrypt encrypted SSL keys.

Additionally I've renamed the configuration options {sslServerSubjectPattern} and {sslClientSubjectPattern} into a single {sslSubjectPattern} because we never need both in the same instance. I hope it's still ok to do that change given that we haven't had an Oak release since these were introduced.

I've also created a PR at https://github.com/apache/jackrabbit-oak/pull/301

[~adulceanu] Would you like to have a look? Thanks!


> [Cold Standby] Add configuration option for SSL key decryption password
> -----------------------------------------------------------------------
>
>                 Key: OAK-9473
>                 URL: https://issues.apache.org/jira/browse/OAK-9473
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: segment-tar
>            Reporter: Axel Hanikel
>            Priority: Major
>         Attachments: 0001-OAK-9473-Cold-Standby-configure-decryption-password-.patch
>
>
> We also want to be able to use encrypted keys for cold standby SSL connections. The password would then be stored and fetched from the OSGi config.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)