Description Chad La Joie 2011-05-12 16:09:39 EDT

Build Identifier: 7.3.1

SslContextFactory#getKeyStore method assumes that the keystore data is going to be coming from a file.  In most cases this is true, however if you are using a PKCS11 keystore or wish to construct a keystore from plain old PEM encoded files this isn't going to work.  A better approach would be to either have getter/setter methods for the keystore and truststore (and provide a few implementations that support different types of sources) or getKeystore and getTruststore methods that could be overridden within a subclass to do the appropriate thing.  I recommend the former.

Reproducible: Always