Issue #901 - Overriding SSL context KeyStoreType requires explicit override of TrustStoreType.
Improved defaulting values for the truststore, avoiding to default the password, which is often missing for a truststore. Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
This commit is contained in:
parent
23fa0303a6
commit
5165b082b5
|
@ -1082,10 +1082,14 @@ public class SslContextFactory extends AbstractLifeCycle implements Dumpable
|
||||||
{
|
{
|
||||||
String type = Objects.toString(getTrustStoreType(), getKeyStoreType());
|
String type = Objects.toString(getTrustStoreType(), getKeyStoreType());
|
||||||
String provider = Objects.toString(getTrustStoreProvider(), getKeyStoreProvider());
|
String provider = Objects.toString(getTrustStoreProvider(), getKeyStoreProvider());
|
||||||
String passwd = Objects.toString(_trustStorePassword, Objects.toString(_keyStorePassword, null));
|
Password passwd = _trustStorePassword;
|
||||||
if (resource == null)
|
if (resource == null || resource.equals(_keyStoreResource))
|
||||||
|
{
|
||||||
resource = _keyStoreResource;
|
resource = _keyStoreResource;
|
||||||
return CertificateUtils.getKeyStore(resource, type, provider, passwd);
|
if (passwd == null)
|
||||||
|
passwd = _keyStorePassword;
|
||||||
|
}
|
||||||
|
return CertificateUtils.getKeyStore(resource, type, provider, Objects.toString(passwd, null));
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|
Loading…
Reference in New Issue