Am 2020-01-28 um 18:07 schrieb Christopher Schultz:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All,

The subject says it all.

Java 9 is changing the default keystore type from JKS to PKCS12 and
deprecating the use of JKS.

Do we know what version of Java Tomcat 10 will require? I suspect it
will be Java 9, so it will match.

In any case, PKCS12 is a better format overall and it's very early in
the Tomcat 10 lifecycle, so I think it's the right time to make this mov
e.

It looks like there is no default type for the trust store type
(unless javax.net.ssl.trustStoreType has a default value), so I would
propose that we also set that default type to PKCS12.

Brilliant proposal.

+1

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to