Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-118

Reloadable File-backed KeyStore

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Won't Do
    • Major
    • 1.1.0.CR2
    • None
    • KeyStores
    • None
    • High

    Description

      File-backed keystores can generically be made reloadable. This can be done by creating a KeyStore wrapper which contains an AtomicReference<KeyStore>. The wrapper also has a file name reference, and will initialize itself from that file. It would use an NIO.2 file watcher to monitor the file for changes; when the file is changed, the watcher attempts to re-load the file into a new KeyStore instance (using cached protection parameters). If successful, the new KeyStore replaces the old one atomically, providing atomic and clean real-time update capability.

      Attachments

        Activity

          People

            darran.lofthouse@redhat.com Darran Lofthouse
            dlloyd@redhat.com David Lloyd
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: