[HTTPCORE-682] Should be possible to specify the provider for key manager/trust manager

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.4.14, 5.1
• Fix Version/s: 5.2-alpha1
• Component/s: HttpCore
• Assignee: Unassigned
• Reporter: Pawel Veselov
• Created: 07/Jul/21 01:23
• Updated: 12/Jul/21 19:57
• Resolved: 12/Jul/21 13:33

Description

SSLContextBuilder always uses default getInstance() method to get the trust or key manager factory. Unlike SSLContext that supports having a provider explicitly specified.

Since there is no way to specify trust or key managers explicitly, the only way to make a desired trust manager load is to meddle with the security providers, which is not always desirable or possible.

So, it would be great if the SSL context builder allowed for either of:

• Use currently specified (using setProvider()) provider/provider name when loading trust/key managers
• Support specifying the provider for trust/key managers explicitly
• Support specifying trust managers or key managers explicitly