Uploaded image for project: 'Geronimo'
  1. Geronimo
  2. GERONIMO-2280

FileKeystoreInstance.getKeyManager() fails when there is more than one privatekey in the store

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.1
    • 1.1.2, 1.2
    • security
    • Security Level: public (Regular issues)
    • None
    • Patch Available

    Description

      FileKeystoreInstance.getKeyManager() fails when there is more than one privatekey in the store.

      Scenario 1: The method will throw UnrecoverableKeyException if the all the private key entries in the keystore do not have the same password (as the entry of our interest).

      Scenario 2: Even if all the private key entries have the same password and the method returns a KeyManager, there is no control on which enrty will be used.

      To overcome this, a temporary keystore (I call it a SubKeystore) can be generated and initialized with the entry corresponding to the alias and used to init the KeyManagerFactory.

      Attachments

        1. GERONIMO-2280.patch
          2 kB
          Vamsavardhana Reddy

        Activity

          People

            vamsic Vamsavardhana Reddy
            vamsic Vamsavardhana Reddy
            Votes:
            1 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: