https://bz.apache.org/bugzilla/show_bug.cgi?id=59344

            Bug ID: 59344
           Summary: PEM file support for JSSE
           Product: Tomcat 9
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: ebo...@apache.org

Hi,

Currently Tomcat accepts PEM encoded certificates when using the APR connector
with OpenSSL only. I'd like to suggest extending the PEM files support to the
JSSE connector too. That would make it easier to switch between configurations
with the same certificate format, or reusing the certificates generated by
letsencrypt as is without importing them into a PKCS12/JKS keystore.

I got a quick look at the code and I think this could be implemented by
creating an in-memory KeyStore in JSSEUtil.getKeyManagers() and initializing it
with the certificate chain and the private key loaded from the PEM files.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to