Bug 37018 - Document how to use tomcat-SSL with a pkcs11 token
Summary: Document how to use tomcat-SSL with a pkcs11 token
Status: RESOLVED WONTFIX
Alias: None
Product: Tomcat 5
Classification: Unclassified
Component: Connector:Coyote (show other bugs)
Version: 5.5.9
Hardware: Other other
: P2 enhancement (vote)
Target Milestone: ---
Assignee: Tomcat Developers Mailing List
URL: http://java.sun.com/j2se/1.5.0/docs/g...
Keywords:
Depends on:
Blocks:
 
Reported: 2005-10-11 12:44 UTC by Ralf Hauser
Modified: 2011-05-20 19:07 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ralf Hauser 2005-10-11 12:44:20 UTC 
Since jdk1.5 has a sun.security.pkcs11.SunPKCS11 implementing
java.security.Provider, it should be possible to no longer store private keys on
the server computer's harddisk, but on a USB token or alike (being willing to
accept that SSL may become very slow...)
Others appear to have asked for this 
http://marc.theaimsgroup.com/?l=tomcat-user&m=111471470228516&w=2

more also in http://forum.java.sun.com/thread.jspa?threadID=256018&messageID=3838346
Comment 1 Yoav Shapira 2005-11-23 22:51:11 UTC 
Ralf, I'm not sure how to document this beyond simply pointing to the (good)
URLs you provide...
Comment 2 Ralf Hauser 2006-12-03 22:37:32 UTC 
some aspect of this is dealt with in bug 40677
Comment 3 Mark Thomas 2011-05-20 19:07:34 UTC 
The Sun URL no longer works - it redirects to the home page for the Oracle forums.

Since bug 40677 has been fixed, I don't see much more that can be done here.