OpenSearch/x-pack
Ioannis Kakavas 2b09e90237
Replace custom reloadable Key/TrustManager (#30509)
Make SSLContext reloadable

This commit replaces all customKeyManagers and TrustManagers 
(ReloadableKeyManager,ReloadableTrustManager, 
EmptyKeyManager, EmptyTrustManager) with instances of 
X509ExtendedKeyManager and X509ExtendedTrustManager. 
This change was triggered by the effort to allow Elasticsearch to 
run in a FIPS-140 environment. In JVMs running in FIPS approved 
mode, only SunJSSE TrustManagers and KeyManagers can be used. 
Reloadability is now ensured by a volatile instance of SSLContext
in SSLContectHolder.
SSLConfigurationReloaderTests use the reloadable SSLContext to
initialize HTTP Clients and Servers and use these for testing the
key material and trust relations.
2018-05-16 08:32:13 +03:00
..
dev-tools Fixup build after opening x-pack 2018-04-20 15:33:46 -07:00
docs Expose master version in REST test context (#30623) 2018-05-15 17:26:43 -04:00
license-tools Make licensing FIPS-140 compliant (#30251) 2018-05-02 22:19:43 +03:00
plugin Replace custom reloadable Key/TrustManager (#30509) 2018-05-16 08:32:13 +03:00
qa Build: Add task interdependencies for ssl configuration (#30633) 2018-05-15 16:09:15 -07:00
test Rename certutil 2018-04-20 15:33:59 -07:00
transport-client Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
NOTICE.txt Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
README.md Reorganize license files 2018-04-20 15:33:59 -07:00
build.gradle Build: Remove legacy bwc files from xpack (#30485) 2018-05-10 22:23:02 -07:00

README.md

Elastic License Functionality

This directory tree contains files subject to the Elastic License. The files subject to the Elastic License are grouped in this directory to clearly separate them from files licensed under the Apache License 2.0.