6 Replies Latest reply on Jul 24, 2012 9:49 AM by Stian Lund

    javax.net.ssl.trustStore - only way to specify client trust?

    Stian Lund Expert

      Hi,

      at the moment we use the property javax.net.ssl.trustStore under <system-properties> to specify a truststore for outbound SSL. This works, but is not very elegant, and is a  bit of a security hole, i.e. having to specify the password in plain text and having it exposed as a custom property.

       

      Is there any other way to do outbound SSL trust than using java custom properties, or is this in the plans for coming versions?

       

      - Stian