[OOZIE-3549] Add back support for truststore passwords

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: trunk
• Fix Version/s: 5.3.0, 5.2.1
• Assignee: Mate Juhasz
• Reporter: Andras Salamon
• Created: 16/Oct/19 07:40
• Updated: 08/Feb/21 10:18
• Resolved: 28/Nov/19 11:00

Description

OOZIE-3157 removed oozie.https.truststore.pass property, because we (Oozie + Jetty) don't write the truststore and the password is not required for reading.

This is no longer true, Java 11's keytool now defaults to creating PKCS12 keystores instead of JKS, and according to this bug description "A JKS keystore can be read without supplying a password (or by supplying an empty one) while a PKCS12 keystore requires a password to be set."

We should reintroduce this property and allow the it again to specify this password and pass it to jetty.