This patch is useful when you want handle keystore password from external
class.
To do this, I added two additional parameters (in Connector tag of server.xml)
to call external method and get Password String.
- Parameter keystorePassHandler (in form some.package.Class.methodToInvoke)
- Parameter truststorePassHandler (in form some.package.Class.methodToInvoke)
obviously, if not present, keystorePass and truststorePass parameters are used.
Example:
using external attached passConsole.jar to enter password from console
add attribute to Connector tag of server.xml
<Connector
port="8443" minProcessors="5" maxProcessors="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
keystoreFile="C:/keystore/cert.p12"
keystoreType="PKCS12" keystorePass="keypass"
keystorePassHandler="it.urmet.test.EnterPassword.consolePassword"
truststoreFile="C:/keystore/.keystore"
truststorePassHandler="it.urmet.test.EnterPassword.consolePassword"
truststoreType="JKS" truststorePass="trustorepass"
clientAuth="true" sslprotocol="TLS"/>
If new attributes are presents,keystorePass and truststorePass are ignored.
-------------------------------------------- INFORMATIVA SULLA PRIVACY Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio e nei suoi eventuali allegati sono riservate e per uso esclusivo del destinatario. Nessuno, all'infuori dello stesso, può copiare o distribuire il messaggio, o parte di esso, a terzi. Chiunque riceva questo messaggio per errore è pregato di distruggerlo e di informare il mittente. PRIVACY NOTICE According to the D.Lgs. 196/2003 this document and its attachments are confidential and intended for the named addressee(s) only. If you are not the intended recipient of this message, any use or dissemination of this message is prohibited. If you have received this document by mistake, please notify the sender and destroy all physical and/or electronic copies.
passConsole.jar
Description: passConsole.jar
--------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
