Re: DO NOT REPLY [Bug 52033] Allowing multiple certificates (JKS)

On 1 November 2011 14:46, Philippe Mouawad <[email protected]> wro=
te:
> Sorry about top post, I don't know how to change it .

You did change for this reply ...

> On Tue, Nov 1, 2011 at 3:41 PM, sebb <[email protected]> wrote:
>
>> Please don't top post; it's easier to follow the thread if it is in orde=
r.
>>
>> On 1 November 2011 14:34, Philippe Mouawad <[email protected]>
>> wrote:
>> > I wanted to add a property called keystore_eager_load=3Dfalse (by defa=
ult).
>>
>> That seems reasonable.
>>
>> But would it make sense to only load the keystore if it was requested,
>> e.g. via another property?
>>
>
> What do you mean ?

Rather than always load the keystore, we would only load it of the
property was present.

The method SSLManager.getKeyStore() already reads the System property
javax.net.ssl.keyStore.
However, the code defaults to loading the file user.home/.keystore
which may well be present on a user system.
We could just drop the default, in which case the user would need to
specify the system property.

This would be an incompatible change, but would affect very few people.

>>
>> Seems to me that the keystore is very rarely needed, or am I missing
>> something?
>>
>
> Yes it's true.
>
>>
>> > On Tue, Nov 1, 2011 at 3:32 PM, sebb <[email protected]> wrote:
>> >
>> >> On 1 November 2011 14:25, Philippe Mouawad <[email protected]=
m>
>> >> wrote:
>> >> > Hello Sebb,
>> >> > Do you think JsseSSLManager should implement TestListener or is the=
re
>> a
>> >> > better way to achieve this:
>> >> >
>> >> > =A0 - Make JmeterKeyStore load Keystore at startup (in my propositi=
on it
>> >> > =A0 will load it at Test startup)
>> >> >
>> >>
>> >> The problem is that the keystore is only needed for some tests.
>> >> Ideally it should only be loaded when necessary.
>> >>
>> >>
>> >> > Thank you
>> >> > Regards
>> >> > Philippe
>> >> >
>> >> > On Tue, Nov 1, 2011 at 3:18 PM, <[email protected]> wrote:
>> >> >
>> >> >> https://issues.apache.org/bugzilla/show_bug.cgi?id=3D52033
>> >> >>
>> >> >> --- Comment #13 from Philippe Mouawad <[email protected]=
om
>> >
>> >> >> 2011-11-01 14:18:19 UTC ---
>> >> >> Hello,
>> >> >> You can achieve the first by setting:
>> >> >> - HTTPClient 3.1 or 4 as implementation
>> >> >> - setting https.use.cached.ssl.context=3Dfalse
>> >> >>
>> >> >>
>> >> >> For the second , we will make it an option.
>> >> >> Regards
>> >> >> Philippe
>> >> >>
>> >> >> --
>> >> >> Configure bugmail:
>> >> >> https://issues.apache.org/bugzilla/userprefs.cgi?tab=3Demail
>> >> >> ------- You are receiving this mail because: -------
>> >> >> You are the assignee for the bug.
>> >> >>
>> >> >> ------------------------------------------------------------------=
---
>> >> >> To unsubscribe, e-mail: [email protected]=
rg
>> >> >> For additional commands, e-mail:
>> [email protected]
>> >> >>
>> >> >>
>> >> >
>> >> >
>> >> > --
>> >> > Cordialement.
>> >> > Philippe Mouawad.
>> >> >
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: [email protected]
>> >> For additional commands, e-mail: [email protected]
>> >>
>> >>
>> >
>> >
>> > --
>> > Cordialement.
>> > Philippe Mouawad.
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>>
>
>
> --
> Cordialement.
> Philippe Mouawad.
>