[CONJ-356] secure connection : use KeyStore private key and associate public keys certificates only Created: 2016-09-29  Updated: 2016-10-03  Resolved: 2016-10-03

Status: Closed
Project: MariaDB Connector/J
Component/s: Other
Affects Version/s: None
Fix Version/s: 1.5.3

Type: Task Priority: Major
Reporter: Diego Dupin Assignee: Diego Dupin
Resolution: Fixed Votes: 0
Labels: None


 Description   

trustStore and keyStore are used in context of setting up SSL connection in Java application between client and server.

Driver can use 2 differents keyStore files :

  • TrustStore : to list trusted certificats (for 1 or 2 ways SSL)
  • KeyStore : to provide private key and certificates corresponding to there public keys (for 2 ways SSL)

The "keyStore" file can list :

  • KeyStore.PrivateKeyEntry
  • KeyStore.SecretKeyEntry
  • KeyStore.TrustedCertificateEntry

Using "clientCertificateKeyStoreUrl" option, the keystore will be used by driver to get private keys and associate certificate chains.

Depending on java KeyManager implementation, TrustedCertificate from keyStore can be used or not.
The purpose of this task is to ensure that driver will use only private key from "clientCertificateKeyStoreUrl" keystore (property "javax.net.ssl.keyStore" will use default java implementation)


Generated at Thu Feb 08 03:15:03 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.