Re: [Ejbca-develop] Separate trust store for SMTP/STARTTLS

[Branko M. <br...@ma...>]

On Wed, 15 Oct 2014 12:23:40 +0200
"Michael Ströder" <mi...@st...> wrote:

> HI!
> 
> Is it possible to configure a separate trust store for out-going SMTP/STARTTLS
> connections?
> 
> Ciao, Michael.
> 

One thing to emphasize - for outgoing connections the JBoss does _not_
use the truststore.jks deployed by the EJBCA build scripts, but instead
relies on the Java system truststore (some file under jvm/blah/blah).

So, you'd need to dictate via some Java property when running JBoss
what truststore to use for outgoing connections.

Of course, not sure if you can set this truststore separately for
different connections, but at least you should be able to limit the CAs
you trust for those (by default you'll trust a whole lot of them).

Best regards

-- 
Branko Majic
Jabber: br...@ma...
Please use only Free formats when sending attachments to me.

Бранко Мајић
Џабер: br...@ma...
Молим вас да додатке шаљете искључиво у слободним форматима.