[QPID-3973] QPID Java SSLUtil does not support non-JKS key store types

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.10, 0.12, 0.14, 0.16, 0.17
• Fix Version/s: 0.17
• Component/s: Java Common, JMS AMQP 0-x
• Labels: nss pkcs11

Environment

Java 1.6 in FIPS mode (NSS)

• Assignee: Robert Godfrey
• Reporter: Jesse Sightler
• Created: 24/Apr/12 19:10
• Updated: 14/Mar/17 20:12
• Resolved: 18/May/12 17:58

Description

We are required to run our system in FIPS-compliant mode, using the NSS library for Java Security. In this mode, we cannot use JKS for private key storage.

Unfortunately, SSLUtil does not support configurable KeyStore types, and will throw an exception if we attempt to do this.