Skip to Main Content

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

adding new trust certificates to a running SSL Server (dynamically)

843811Apr 18 2007 — edited Aug 21 2008
I have an SSL Server i wrote that uses a serverTrust keystore. I create the SSLContext and initialize it with my TrustManager and KeyManager arrays. What I noticed is that now I have an SSL Context that is bound to the serverTrust keystore I used to create the TrustManager. This Context then will beget an SSLServerSocketFactory which will then beget an SSLServerSocket that I accept connections from.

We have a desire to add new trust certificates to the system dynamically. I wrote a little monitor thread that watches a directory for incoming new certs and then opens the serverTrust keystore and adds them in. So I have 1 part of it down. However it seems I need to restart before the addition is reflected in the server.

I would rather not affect a server restart just to add a new trust certificate. But it seems that I have to in order for the Context to get updated.

So my question boils down is what I want to do possible or has it been done before?

Any and all suggestions welcomed.

thanks

Doug Lochart
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Sep 18 2008
Added on Apr 18 2007
10 comments
649 views