Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-1111

2-way SSL Truststore and Keystore Improvements

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.3.0
    • Server
    • None

    Description

      Currently, the DefaultHttpClientFactory is setting the 2-way SSL for dispatches truststore as gateway.jks. This should be driven by configuration and probably default to cacerts rather than gateway.jks.

      The client cert alias inside the keystore should be configurable as well so that we can possibly have different certs representing different topologies.

      In addition, the keystore to host the client certs should be configurable.

      Attachments

        Issue Links

          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. KNOX-1643 Default HttpClient should trust gateway certificate

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. KNOX-1812 The Knox Gateway truststore should be configurable

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. KNOX-1818 Update documentation with configurable truststore information

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          links to

          Web Link GitHub Pull Request #74

          Activity

            People

              rlevas Robert Levas
              lmccay Larry McCay
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h
                  1h