[THRIFT-3117] Java TSSLTransportFactory can't load certificates within JAR archive

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 0.9.2
• Fix Version/s: 0.9.3
• Component/s: Java - Library
• Assignee: Unassigned
• Reporter: Maxim Smyatkin
• Created: 26/Apr/15 14:36
• Updated: 21/Jul/15 02:21
• Resolved: 30/Apr/15 17:44

Description

TSSLTransportFactory's setKeyStore/setTrustStore accept only plain file system paths what makes it impossible to use URL's or classpath based resources. E.g., I didn't find a way to load certificate from JAR.

I propose to look for both URLs and resources if the file can not be found by the given path. It's how it is done in ActiveMQ:

https://access.redhat.com/documentation/en-US/Fuse_ESB/4.4.1/html/ActiveMQ_Security_Guide/files/SSL-SecureJavaClients.html

https://github.com/apache/activemq/blob/master/activemq-client/src/main/java/org/apache/activemq/ActiveMQSslConnectionFactory.java#L175-L206