-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allows the HTTP server to use PEM truststore #39106
Allows the HTTP server to use PEM truststore #39106
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice clean up, LGTM.
Have you already documented the @Certificates
option ? I suppose may be it is better wait till the project is hosted somewhere in the Quarkus space ?
@sberyozkin the documentation is on https://github.com/cescoffier/certificate-generator until we move it. |
This comment has been minimized.
This comment has been minimized.
The BC JSSE test failure is likely related as it uses the cred provider |
Yes, I had to change a few things in the credential provider support. I will have a look on Monday. |
Previously, configuring the truststore with PEM files for mTLS (mutual TLS) usage was not supported, limiting options to JKS and P12 formats. This commit addresses this limitation by introducing support for PEM truststores in the HTTP server configuration. Additionally, this commit accomplishes the following tasks: - Removes hand-crafted certificates. - Fixes issues related to alias passwords. - Deprecates the usage of "key" properties, replacing them with "alias" properties for clarity and consistency.
69294a2
to
0fddc50
Compare
@sberyozkin it should be fixed now - was a bug in the new code. |
Status for workflow
|
Previously, configuring the truststore with PEM files for mTLS (mutual TLS) usage was not supported, limiting options to JKS and P12 formats. This commit addresses this limitation by introducing support for PEM truststores in the HTTP server configuration.
Additionally, this commit accomplishes the following tasks: