Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS Registry: provide a TLS configuration called javax.net.ssl having truststore set in the same way as default SunJSSE provider #45175

Open
ppalaga opened this issue Dec 17, 2024 · 2 comments · May be fixed by #45184
Assignees
Labels
area/vertx kind/enhancement New feature or request

Comments

@ppalaga
Copy link
Contributor

ppalaga commented Dec 17, 2024

Description

User may want to use the default Java truststore that is usually available under $JAVA_HOME/lib/security/jssecacerts, $JAVA_HOME/lib/security/cacerts or overridden throw javax.net.ssl.trustStore system property.

To make this use case easier, we should introduce a reserved javax.net.ssl TLS configuration name with the following properties:

  • Users can use javax.net.ssl as a value for various *.tls-configuration-name options, such as quarkus.http.tls-configuration-name
  • Users do not need to define that named TLS config by themselves
  • A TLS configuration with name javax.net.ssl would be created on demand by the TLS registry extension
@ppalaga ppalaga added the kind/enhancement New feature or request label Dec 17, 2024
Copy link

quarkus-bot bot commented Dec 17, 2024

/cc @radcortez (config)

@ppalaga ppalaga self-assigned this Dec 17, 2024
@ppalaga ppalaga changed the title [TLS Registry] TLS configuration javax.net.ssl created on demand from javax.net.ssl.* system properties [TLS Registry] provide a TLS configuration called javax.net.ssl having truststore set in the same way as default SunJSSE provider Dec 18, 2024
@ppalaga
Copy link
Contributor Author

ppalaga commented Dec 18, 2024

I narrowed the scope to cover only the default truststore.

ppalaga added a commit to ppalaga/quarkus that referenced this issue Dec 18, 2024
…g truststore set in the same way as default SunJSSE provider, fix quarkusio#45175
@ppalaga ppalaga changed the title [TLS Registry] provide a TLS configuration called javax.net.ssl having truststore set in the same way as default SunJSSE provider TLS Registry: provide a TLS configuration called javax.net.ssl having truststore set in the same way as default SunJSSE provider Dec 18, 2024
ppalaga added a commit to ppalaga/quarkus that referenced this issue Dec 18, 2024
…g truststore set in the same way as default SunJSSE provider, fix quarkusio#45175
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/vertx kind/enhancement New feature or request
Projects
None yet
3 participants