Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
In this tread we discuss enhancements to the IMAP/POP3/SMTP cryptography: https://www.mail-archive.com/server-dev@james.apache.org/msg70772.html
The need of having alternatives to the JKS keystore format was expressed and support for PKCS12 format requested.
This change is easy to carry over: have one more parameter to let people express which format they use. This looks like:
<tls socketTLS="false" startTLS="false">
<keystore>file://conf/keystore</keystore>
<keystoreType>PKCS12</keystoreType>
<secret>yoursecret</secret>
<provider>org.bouncycastle.jce.provider.BouncyCastleProvider</provider>
<algorithm>SunX509</algorithm>
</tls>
Generation then becomes:
$ keytool -genkey -alias james -keyalg RSA -storetype PKCS12 -keystore keystore
