[DIRSTUDIO-1190] Keystore change from JKS to PKCS12

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M14
• Assignee: Stefan Seelmann
• Reporter: Stefan Seelmann
• Created: 29/Jul/18 15:27
• Updated: 18/Apr/20 11:40
• Resolved: 09/Aug/18 05:09

Description

Until Java 8 the default key store was JKS, since Java 9 the default is PKCS12.

In the studio code when we use key stores there is a mix of

• KeyStore.getInstance( KeyStore.getDefaultType() );
• KeyStore.getInstance( "JKS" );
• KeyStore.getInstance( "JCEKS" )

This needs to be cleaned up.

There is also the question if an automatic migration from existing JKS stores in existing installations .to PKCS12 is possible

Workaround is to change default keystore to JKS (property keystore.type in $JAVA_HOME/conf/security/java.security)

 Reference: http://openjdk.java.net/jeps/229

Issue Links

• is a clone of: DIRSERVER-2242 Keystore change from JKS to PKCS12
• relates to: DIRSTUDIO-1179 java.io.IOException: Invalid secret key format after Java update