Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue #8786 - add configuration for KeyStoreScanner to not resolve aliases #8787

Merged

Conversation

lachlan-roberts
Copy link
Contributor

@lachlan-roberts lachlan-roberts commented Oct 31, 2022

Issue #8786

Allow the KeyStoreScanner to monitor the symlink file itself instead of the target of the symlink.

…iases

Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
Copy link
Contributor

@sbordet sbordet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lachlan-roberts why is this necessary? See also comment on the issue.

Copy link
Contributor

@sbordet sbordet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"KeyStore" has the capital "S", so in the test class this should respected in variable names and pretty much everywhere.

Also, I won't mind to have the jetty-ssl-context-reload.xml modified to support this additional property, and Jetty module ssl-reload as well.

Also, please update the documentation module-ssl-reload.adoc with a small paragraph after the module properties that explains with an example the difference between the 2 cases.

Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
Copy link
Contributor

@sbordet sbordet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.
If you want to fix all keystore occurrences with keyStore would be great, given that you changed 80% of them but not all.

@lachlan-roberts lachlan-roberts merged commit 690220f into jetty-10.0.x Nov 10, 2022
@joakime joakime deleted the jetty-10.0.x-8786-KeyStoreScanner-Symlink branch November 21, 2022 16:45
joakime added a commit that referenced this pull request Dec 6, 2022
…nges

+ Removed changes from #8786 and #8787
+ More test cases

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
joakime added a commit that referenced this pull request Dec 7, 2022
…nges (#9014)

* Issue #8973 - Rework KeyStoreScanner handling for symlink related changes

+ Removed changes from #8786 and #8787
+ More test cases
+ revert jetty.sslContext.reload.followLinks boolean
+ Scanner should follow its own linkOptions setting
+ remove bad documentation in module-ssl-reload.adoc

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
Signed-off-by: Lachlan Roberts <lachlan@webtide.com>
Co-authored-by: Lachlan Roberts <lachlan@webtide.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

KeyStoreScanner is not able to monitor a symlink file and always resolves to the target.
2 participants