[DIRSERVER-2242] Keystore change from JKS to PKCS12

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0.AM25
• Assignee: Stefan Seelmann
• Reporter: Stefan Seelmann
• Created: 28/Jul/18 20:56
• Updated: 09/Aug/18 05:06
• Resolved: 09/Aug/18 05:06

Description

Until Java 8 the default key store was JKS, since Java 9 the default is PKCS12.

In the server code when we use key stores there is a mix of

• KeyStore.getInstance( KeyStore.getDefaultType() );
• KeyStore.getInstance( "JKS" );

This needs to be cleaned up.

There is also the question if an automatic migration from existing JKS stores in existing installations .to PKCS12 is possible

Workaround is to change default keystore to JKS (property keystore.type in $JAVA_HOME/conf/security/java.security)

 Reference: http://openjdk.java.net/jeps/229

Issue Links

• is cloned by: DIRSTUDIO-1190 Keystore change from JKS to PKCS12