[QPID-8016] [Broker-J] FileKeyStore alias does not select the correct certificate

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: qpid-java-6.1, qpid-java-broker-7.0.0
• Fix Version/s: qpid-java-broker-7.0.3
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Keith Wall
• Created: 06/Nov/17 10:11
• Updated: 02/Oct/19 19:21
• Resolved: 20/Mar/18 13:29

Description

Keystore provider implementation FileKeyStore has a #certificateAlias attribute that is supposed to select a single certificate for use from a store that has many. This feature does not currently work. It seems that the last certificate is chosen regardless of the alias specified by the user.

I reproduced this problem with test resource at test-profiles/test_resources/ssl/java_client_keystore.jks. It contains two non-CA certs app1 and app2. app2 was always presented over the TLS enabled socket, regardless of the setting of the certificateAlias