[ARTEMIS-4528] TLS support PEM format for key and trust store type

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.31.0
• Fix Version/s: 2.32.0
• Component/s: Configuration
• Assignee: Gary Tully
• Reporter: Gary Tully
• Created: 06/Dec/23 15:39
• Updated: 15/Apr/24 11:58
• Resolved: 15/Dec/23 19:29

Description

managing key and trust store passwords when the credentials are securely stored or managed by other means is a nuisance.

there is a nice PEM keystore provider at: https://github.com/ctron/pem-keystore

This gives us an intuitive way to easily reference a simple cert or key without a password as is the case with jsk or pkcs12

<acceptor name="netty-ssl-acceptor">tcp://localhost:5500?sslEnabled=true;keyStorePath=server-keystore.pem;keyStoreType=PEM</acceptor>

 

Issue Links

• is superceded by: ARTEMIS-4710 Keep pem-keystore dependencies as is; make it really optional
• links to: GitHub Pull Request #4706