Allow choosing from multiple keys in a JKS keystore
srowen opened this issue · comments
Sean Owen commented
Right now the first key in the configure JKS keystore will be used for HTTP in the serving layer. It should be selectable via an optional new "...api.key-alias" configuration. This will actually become necessary in Tomcat 8.5 with JASPIC 1.1, since it seems to always look for an explicitly-named alias, defaulting to "tomcat".