Re: [External] : Re: PEM KeyStore Implementation

2023-12-05 Thread Anthony Scarpino
--- *Von:* Anthony Scarpino <mailto:anthony.scarp...@oracle.com>> *Gesendet:* Freitag, 17. November 2023 20:52 *An:* Karl Scheibelhofer mailto:karl.scheibelho...@gmx.net>> *Cc:* security-dev@openjdk.org <mailto:security-dev@openjdk.org> mailto:security-dev@openj

AW: [External] : Re: PEM KeyStore Implementation

2023-12-04 Thread Karl Scheibelhofer
mber 2023 20:52 An: Karl Scheibelhofer Cc: security-dev@openjdk.org Betreff: Re: [External] : Re: PEM KeyStore Implementation As you may have seen, the PEM API draft is out: https://openjdk.org/jeps/8300911 Tony On 10/18/23 3:00 AM, Karl Scheibelhofer wrote: > Hi Sean, > > Yes, I can

Re: [External] : Re: PEM KeyStore Implementation

2023-12-01 Thread Karl Scheibelhofer
er/jdk/tree/pem-keystore> > JDK main-line development https://openjdk.org/projects/jdk - GitHub - > KarlScheibelhofer/jdk at pem-keystore > github.com > > -- > *Von:* Anthony Scarpino > *Gesendet:* Freitag, 17. November 2023 20:52 > *An:* Karl Scheib

Re: [External] : Re: PEM KeyStore Implementation

2023-11-17 Thread Anthony Scarpino
As you may have seen, the PEM API draft is out: https://openjdk.org/jeps/8300911 Tony On 10/18/23 3:00 AM, Karl Scheibelhofer wrote: Hi Sean, Yes, I can help with this new PEM API. Let me know, when there is something to review. Best regards, Karl On Tue, Oct 17, 2023, 19:12 Sean Mulla

Re: [External] : Re: PEM KeyStore Implementation

2023-10-18 Thread Karl Scheibelhofer
Hi Sean, Yes, I can help with this new PEM API. Let me know, when there is something to review. Best regards, Karl On Tue, Oct 17, 2023, 19:12 Sean Mullan wrote: > Hi Karl, > > I discussed your proposal with some other colleagues. > > We generally feel a PEM KeyStore would be a useful addit

Re: [External] : Re: PEM KeyStore Implementation

2023-10-17 Thread Sean Mullan
Hi Karl, I discussed your proposal with some other colleagues. We generally feel a PEM KeyStore would be a useful addition to the JDK. This would alleviate usability issues that many users encounter when configuring and deploying applications that store keys or certificates in PEM files. Howev

Re: [External] : Re: PEM KeyStore Implementation

2023-10-05 Thread Sean Mullan
On Oct 5, 2023, at 2:48 AM, Karl Scheibelhofer mailto:karl.scheibelho...@gmx.net>> wrote: Hi Sean, Yes, I had a look at the Contributing docs at the OpenJDK site before. I also signed the OCA. Great, thanks. Honestly, I thought there would be some more reaction on the suggested PEM KeySto

Re: [External] : Re: PEM KeyStore Implementation

2023-10-05 Thread Karl Scheibelhofer
Hi Sean, Yes, I had a look at the Contributing docs at the OpenJDK site before. I also signed the OCA. Honestly, I thought there would be some more reaction on the suggested PEM KeyStore. It would really be good to discuss the topic with others. Is there anything we can do to get others in sharin

Re: [External] : Re: PEM KeyStore Implementation

2023-10-04 Thread Sean Mullan
Hi Karl, The OpenJDK Developer’s Guide includes a helpful section on Contributing to an OpenJDK Project [1]. I suggest you read through that if you have not already. In particular, have you signed the OCA? I don’t want to review your code/contribution until that is done. For this particular co

Re: [External] : Re: PEM KeyStore Implementation

2023-10-04 Thread Karl Scheibelhofer
Hi All, I would like to contribute my PEM KeyStore implementation to the OpenJDK, including integration in the OpenJDK source and creating a pull request. What is the recommended way to do this? Who can create a suitable ticket in OpenJDK to document the enhancement and to track the progress? Wha

Re: [External] : Re: PEM KeyStore Implementation

2023-09-20 Thread Karl Scheibelhofer
Hi Tony! When the PEM API implementation becomes available it would make sense to use it inside the PEM Keystore implementation. It will reduce the code (the internal classes PemReader und PemWriter may become obsolete), but it does not affect the functionality of the PEM keystore. Users of the P

Re: [External] : Re: PEM KeyStore Implementation

2023-09-19 Thread Anthony Scarpino
There are no doc links yet. Tony On 9/10/23 1:04 AM, Karl Scheibelhofer wrote: Hi Tony, The motivation was mostly about reading PEM keys and certificates generated somewhere else. This is common practice in enterprise environments I work in. Because corporate key material is subject to central

Re: PEM KeyStore Implementation

2023-09-10 Thread Karl Scheibelhofer
Hi Tony, The motivation was mostly about reading PEM keys and certificates generated somewhere else. This is common practice in enterprise environments I work in. Because corporate key material is subject to centralized key management, including generation, backup and rollover. PEM is the format m

Re: PEM KeyStore Implementation

2023-09-08 Thread Anthony Scarpino
Hi Karl The keystore is interesting and may have some value. Was your use case mostly reading PEM keys and certificates generated elsewhere for use with a particular application, maybe webservers? Did you see value in writing to this keystore from Java? On the topic of PEM, I hope before t