[JAMES-3638] Allow alternative keystore formats like PKCS12

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.7.0
• Component/s: IMAPServer, POP3Server, SMTPServer
• Assignee: Unassigned
• Reporter: Benoit Tellier
• Created: 28/Aug/21 05:43
• Updated: 08/Sep/21 04:52
• Resolved: 08/Sep/21 04:52

Description

In this tread we discuss enhancements to the IMAP/POP3/SMTP cryptography: https://www.mail-archive.com/[e-mail]/msg70772.html

The need of having alternatives to the JKS keystore format was expressed and support for PKCS12 format requested.

This change is easy to carry over: have one more parameter to let people express which format they use. This looks like:

     <tls socketTLS="false" startTLS="false">
         <keystore>file://conf/keystore</keystore>
         <keystoreType>PKCS12</keystoreType>
         <secret>yoursecret</secret>
         <provider>org.bouncycastle.jce.provider.BouncyCastleProvider</provider>
         <algorithm>SunX509</algorithm>
     </tls>

Generation then becomes:

$ keytool -genkey -alias james -keyalg RSA  -storetype PKCS12  -keystore keystore

Issue Links

• links to: GitHub Pull Request #625
• links to: GitHub Pull Request #626