[QPID-5946] [Java Broker] Add alternative KeyStore implementation that can use standard crt/pem rather than jks files

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.29
• Component/s: Broker-J
• Assignee: Robert Godfrey
• Reporter: Robert Godfrey
• Created: 30/Jul/14 12:56
• Updated: 14/Mar/17 21:29
• Resolved: 31/Jul/15 10:28

Description

Currently the only keystore form allowed is a file in a jks (or p12) format on the server filesystem.

We should enhance to allow the use of pem or der private keys in association with a separate certificate file. Further we should allow for these files to either be on the filesystem of the server, or to be inserted directly into the configuration (including by uploading through the REST API).

Issue Links

• is related to: QPID-5056 [Java Broker] Change configuration model to allow for KeyStores/TrustStores which are not JKS files on the filesystem
• is required by: QPID-6319 Make UI support the upload of PEM/DER files