Return-Path: 
 <dev-return-80516-apmail-geronimo-dev-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-dev-archive@www.apache.org
Received: (qmail 31507 invoked from network); 25 Feb 2010 09:14:51 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 25 Feb 2010 09:14:51 -0000
Received: (qmail 32812 invoked by uid 500); 25 Feb 2010 09:14:50 -0000
Delivered-To: apmail-geronimo-dev-archive@geronimo.apache.org
Received: (qmail 32714 invoked by uid 500); 25 Feb 2010 09:14:50 -0000
Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:dev-help@geronimo.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@geronimo.apache.org>
List-Post: <mailto:dev@geronimo.apache.org>
Reply-To: dev@geronimo.apache.org
List-Id: <dev.geronimo.apache.org>
Delivered-To: mailing list dev@geronimo.apache.org
Received: (qmail 32707 invoked by uid 99); 25 Feb 2010 09:14:50 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Feb 2010 09:14:50 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Feb 2010 09:14:49 +0000
Received: from brutus.apache.org (localhost [127.0.0.1])
	by brutus.apache.org (Postfix) with ESMTP id F1D66234C1F2
	for <dev@geronimo.apache.org>; Thu, 25 Feb 2010 01:14:27 -0800 (PST)
Message-ID: <1010533969.520571267089267989.JavaMail.jira@brutus.apache.org>
Date: Thu, 25 Feb 2010 09:14:27 +0000 (UTC)
From: "Ashish Jain (JIRA)" <jira@apache.org>
To: dev@geronimo.apache.org
Subject: [jira] Commented: (GERONIMO-5156) Command line utility to unlock a
 keystore and private key
In-Reply-To: <226964006.499181267032147944.JavaMail.jira@brutus.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org


    [ https://issues.apache.org/jira/browse/GERONIMO-5156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838260#action_12838260 ] 

Ashish Jain commented on GERONIMO-5156:
---------------------------------------

Here is how plan to address this:

1) Command to invoke the unlockKeystore functionality
deploy.bat unlockKeyStore <keyStoreName> <keyAlias1> <keyAlias2> .................

2) There can be 2 cases 
a) one is when user only want to unlock the keystore. In that case the command will be
deploy.bat unlockKeyStore <keyStoreName>

The password for keystore will have to be specified in the file pointing to org.apache.geronimo.keyStoreTrustStorePasswordFile.
See GERONIMO-4896 for more information on this system property.

b) User wants to unlock a keyStore and one or more private keys. In that case the command will be
deploy.bat unlockKeyStore <keyStoreName> <keyAlias1> <keyAlias2> .................

The password for keystore and private keys will have to be specified in the file pointing to org.apache.geronimo.keyStoreTrustStorePasswordFile.
See GERONIMO-4896 for more information on this system property.  here is how the file will look like
keyStorePassword=<Encrypted_KeyStorePassword>
keyAlias1=<Encrypted_keyAlias1Password>
keyAlias2=<Encrypted_keyAlias2Password>
.
.

This order of specifying the keyStore and aliases have to  be preserved,

Please suggest any improvements.



> Command line utility to unlock a keystore and private key
> ---------------------------------------------------------
>
>                 Key: GERONIMO-5156
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-5156
>             Project: Geronimo
>          Issue Type: New Feature
>      Security Level: public(Regular issues) 
>          Components: security
>         Environment: geronimo tomcat assembly
>            Reporter: Ashish Jain
>            Assignee: Ashish Jain
>             Fix For: 2.1.5, 2.2.1
>
>
> A command line utility to unlock a keystore and private key.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.