Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Won't Do
-
1.6
-
Windows 7 Java: Suspect all environements
Description
When trying to configure the apollo broker to support client authentication there is no support for placing trusted client certificates in a separate truststore. One must place the certificates in the keystore containing the server's private key.
The common practice (as also done in ActiveMQ) is to place trusted certificates in a truststore that contains only trusted certificates (one may wish to interactively add trusted client certificates to this truststore) whereas the keystore containing the private key is locked up tight as a drum.