mina-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gary Bell (JIRA)" <j...@apache.org>
Subject [jira] Commented: (FTPSERVER-179) Update SSL configuration how-to to describe how to select different keystore algorithms
Date Thu, 18 Sep 2008 16:08:44 GMT

    [ https://issues.apache.org/jira/browse/FTPSERVER-179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12632269#action_12632269
] 

Gary Bell commented on FTPSERVER-179:
-------------------------------------

Thanks Niklas, I didn't think to look under the listeners section of the docs - sorry. I just
went straight to the TLS/SSL Support section since that is what I was after. Perhaps a link
directing unfamiliar users to the listeners section for more configuration options might be
helpful?

In any case, I am happy to close this issue if you want. 


> Update SSL configuration how-to to describe how to select different keystore algorithms
> ---------------------------------------------------------------------------------------
>
>                 Key: FTPSERVER-179
>                 URL: https://issues.apache.org/jira/browse/FTPSERVER-179
>             Project: FtpServer
>          Issue Type: Task
>    Affects Versions: 1.0-M3
>         Environment: IBM AIX 5.2, IBM java J2RE 1.5.0 IBM AIX build pap64devifx-20071025
(SR6b)
>            Reporter: Gary Bell
>            Priority: Trivial
>
> The DefaultSslConfiguration class understandably selects the SunX509 algorithm as a sensible
default, but this algorithm is not available on AIX running the IBM JVM shown above. Attempting
to configure SSL using the config.xml file results in the exception:
> java.security.NoSuchAlgorithmException: SunX509 KeyManagerFactory not available
> On my machine, the "IbmX509" algorithm should be used instead of the SunX509 one. But
the SSL configuration howto does not explain how to select a different algorithm and does
not mention the "algorithm" attribute that can be applied to the <keystore> and <truststore>
elements. 
> The document therefore needs to be updated. For reference, my config now reads:
>  <ssl>
>                 <keystore file="./res/conf/ftpserver.jks" password="password" algorithm="IbmX509"/>
>                 <truststore file="./res/conf/truststore.jks" password="password" algorithm="IbmX509"/>
>             </ssl>
> Thank you very much.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message