Loading...

XML

Word

Printable

Steps to Reproduce:
Hide

configure twoway ssl (see https://github.com/jboss-developer/jboss-eap-quickstarts/tree/7.1/helloworld-mutual-ssl)

move truststore to ldap - http://planet.jboss.org/post/ldap_keystore

if ldap entry contains userCertificate;binary", "userSMIMECertificate", and "userPKCS12" -> it works

remove "userPKCS12", it should work but it doesn't
Show
configure twoway ssl (see https://github.com/jboss-developer/jboss-eap-quickstarts/tree/7.1/helloworld-mutual-ssl ) move truststore to ldap - http://planet.jboss.org/post/ldap_keystore if ldap entry contains userCertificate;binary", "userSMIMECertificate", and "userPKCS12" -> it works remove "userPKCS12", it should work but it doesn't
Git Pull Request:
https://github.com/wildfly-security/wildfly-elytron/pull/1163

The "key-attribute" ("userPKCS12") should not be necessary to use LdapKeyStore as truststore.
See Steps to Reproduce for more information.

blocks

JBEAP-15004 [GSS](7.1.z) No need to store CA cert redundantly for Elytron LDAP keystore