tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject [Bug 59344] PEM file support for JSSE
Date Thu, 21 Apr 2016 14:02:13 GMT

--- Comment #1 from Emmanuel Bourg <> ---
Created attachment 33788
PEM support implementation

Here is a patch implementing this feature:
- SSLHostConfigCertificate is modified to accept certificateFile,
certificateChainFile and certificateKeyFile with JSSE
- The HTTP connector documentation is updated accordingly
- A new package private class is added
to handle the PEM file parsing and decoding. It supports PKCS#8 private keys
- JSSEUtil.getKeyManagers() is modified to create an in-memory keystore
initialized with the PEM files when the certificateFile is specified.
- TesterSupport is modified to make it possible to initialize SSL with PEM
files even when the APR connector isn't used.
- TestSsl is extended to test SSL with plain text and encrypted keys. It is
missing a test with a certificate chain file to cover all the cases (the test
certificate being self signed it has no intermediary CA).

You are receiving this mail because:
You are the assignee for the bug.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message