OpenSearch/x-pack
Ioannis Kakavas 77aeeda275
Correctly handle PKCS#11 tokens for system keystore (#33460)
* Correctly handle NONE keyword for system keystore

As defined in the PKCS#11 reference guide
https://docs.oracle.com/javase/8/docs/technotes/guides/security/p11guide.html
PKCS#11 tokens can be used as the JSSE keystore and truststore and
the way to indicate this is to set `javax.net.ssl.keyStore` and
`javax.net.ssl.trustStore` to `NONE` (case sensitive).

This commits ensures that we honor this convention and do not
attempt to load the keystore or truststore if the system property is
set to NONE.

* Handle password protected system truststore

When a PKCS#11 token is used as the system truststore, we need to
pass a password when loading it, even if only for reading
certificate entries. This commit ensures that if
`javax.net.ssl.trustStoreType` is set to `PKCS#11` (as it would
when a PKCS#11 token is in use) the password specified in
`javax.net.ssl.trustStorePassword` is passed when attempting to
load the truststore.

Relates #33459
2018-09-10 11:18:44 +03:00
..
dev-tools Build: Merge xpack checkstyle config into core (#33399) 2018-09-05 09:17:02 -04:00
docs [DOCS] Moves troubleshooting and limitations to stack-docs 2018-09-06 10:00:29 -07:00
license-tools Build: Rework shadow plugin configuration (#32409) 2018-08-21 20:03:28 -04:00
plugin Correctly handle PKCS#11 tokens for system keystore (#33460) 2018-09-10 11:18:44 +03:00
protocol Test fix - Graph HLRC tests needed another field adding to randomisation exception list 2018-08-29 15:19:26 +01:00
qa SQL: Improve alias vs index resolution (#33393) 2018-09-07 07:24:43 +03:00
test Build: Rework shadow plugin configuration (#32409) 2018-08-21 20:03:28 -04:00
transport-client Run forbidden api checks with runtimeJavaVersion (#32947) 2018-08-22 09:05:22 +03:00
NOTICE.txt Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
README.md Reorganize license files 2018-04-20 15:33:59 -07:00
build.gradle Build: Merge xpack checkstyle config into core (#33399) 2018-09-05 09:17:02 -04:00

README.md

Elastic License Functionality

This directory tree contains files subject to the Elastic License. The files subject to the Elastic License are grouped in this directory to clearly separate them from files licensed under the Apache License 2.0.