[QPID-6538] [Java Broker] Allow TrustStores to be used to distribute public keys to clients

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: qpid-java-6.0
• Component/s: Broker-J
• Assignee: Keith Wall
• Reporter: Robert Godfrey
• Created: 10/May/15 20:12
• Updated: 02/Oct/19 19:20
• Resolved: 07/Jul/15 21:08

Description

In order perform end to end encryption of messages, a system needs a way of distributing public keys / certificates. We can use the trust stores in the broker as a store of public keys, and add the ability to trust stores to represent themselves as a message source whereby a consumer connecting to the message source is sent a message containing all of the public key certificates currently held in the trust store.

Additionally we can collect public keys used in SSL client auth, and store these in a designated trust store.