Recorder: SslServerContext assumes the keyStore and KeyManager have the same password
See original GitHub issueIn SslServerContext the keyStrore is initialized like so:
lazy val keyStore = {
val ks = KeyStore.getInstance(keyStoreType.toString)
withCloseable(keyStoreInitStream) { ks.load(_, password) }
ks
}
and the KeyManager is initialized like so
// Set up key manager factory to use our key store
val kmf = KeyManagerFactory.getInstance(Algorithm)
kmf.init(keyStore, password)
The code assumes they both use the same password. In reality, if there are two different passwords needed the you will get the an exception:
java.security.UnrecoverableKeyException: Cannot recover key
Issue Analytics
- State:
- Created 7 years ago
- Comments:10 (5 by maintainers)
Top Results From Across the Web
Security Toolkit for Java™ Programmer's Guide - Test
This section of the Programmer's Guide introduces the Entrust Authority™. Security Toolkit for Java™ (formerly Entrust/Toolkit™ for Java™) and explains.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@ggsjyoon Please ping me if you can come up with a more complete version 😃
This feature request has been idle for a very long time. Closing for now.