jss

#10 Support for PKCS #11 KeyStore
Closed: wontfix by cipherboy. Opened by edewata.

Closed: wontfix
Reopen Issue

In order to run Tomcat 8.5+ with SSL server certificate and key stored in HSM, the Tomcat HTTP NIO connector needs to be configured with PKCS #11 keystore with JSS as keystore provider.

Currently JSS keystore is not working. It needs to be fixed.

@edewata Is this fixed? I see you committed three items related to this:

https://github.com/dogtagpki/jss/commit/95f80cc3ff25ffe69f23d64d4b7683d994a23b9a
https://github.com/dogtagpki/jss/commit/c03c88be30cc875fce4cfaa965bd3f22a9e9e78e
https://github.com/dogtagpki/jss/commit/f5c7bbf024f8a55d0da09b85328703c779e6fed0

Metadata Update from @cipherboy:
- Custom field component adjusted to None
- Custom field feature adjusted to None
- Custom field origin adjusted to None
- Custom field proposedmilestone adjusted to None
- Custom field proposedpriority adjusted to None
- Custom field reviewer adjusted to None
- Custom field type adjusted to None
- Custom field version adjusted to None

Closing this as WONTFIX. We've added support for a SSLEngine using our KeyStore/KeyManager/TrustManagers provided by JSS into TomcatjSS, while also introducing a JSSEngine implementation of SSLEngine. This means we don't strictly have to work with OpenJDK's SunJSSE-with-SunPKCS11-FIPS's PKCS#11 KeyStore.

Metadata Update from @cipherboy:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
None
None
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.