Skip to content

Modernize SSL support to include per-connector SSLContext, pkcs12 default, keyalias support. #2132

Closed
Feature
Closed
Modernize SSL support to include per-connector SSLContext, pkcs12 default, keyalias support.#2132
Feature
Assignees
mattrpav
Milestone
2026 Security hardening

Description

@mattrpav
mattrpav
opened on Jun 22, 2026
  • Migrate from ThreadLocal by default
  • Default to prefer pkcs12 keystore type
  • Support automatic JKS keystore type fallback
  • Support keyAlias
  • Support SSLContext per-transportConnector, per-networkConnector with broker-wide fallback
  • Prepare for reload support

ref: AMQ-9753
ref: AMQ-9694

Activity

mattrpav
self-assigned this
on Jun 22, 2026
mattrpav
added 4 commits that reference this issue on Jun 22, 2026

[apache#2132] Add SslContext as an interface

ad9f9e5

[apache#2132] Refactor usage of SslContext to ThreadLocalSslContext

83e22b7

[apache#2132] Add SslContext as an abstract class

d978445

[apache#2132] Refactor usage of SslContext to ThreadLocalSslContext

b458792
mattrpav
changed the title [-]Support reloadable SSL and keyAlias[/-] [+]Modernize SSL support to include per-connector SSLContext, pkcs12 default, keyalias support.[/+] on Jun 22, 2026
mattrpav
added this to Apache ActiveMQ v6.3.0on Jun 22, 2026
github-project-automation
moved this to Backlog in Apache ActiveMQ v6.3.0on Jun 22, 2026
mattrpav
added 3 commits that reference this issue on Jun 22, 2026

[apache#2132] SSL modernization

02cb65e

[apache#2132] Add SslContext as an abstract class

8b71207

[apache#2132] SSL modernization

20a8b36
mattrpav
moved this from Backlog to In progress in Apache ActiveMQ v6.3.0on Jul 12, 2026
mattrpav
added 3 commits that reference this issue on Jul 15, 2026

[apache#2132] Rename SslContext to ThreadLocalSslContext

59301c6

[apache#2132] Add SslContext as an abstract class

3088989

[apache#2132] SSL modernization

9db25d6

9 remaining items

mattrpav
added 4 commits that reference this issue on Aug 5, 2026

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

a4b6eb2

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

ac7e768

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

2898d07

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

c427ffd

github-actions commented on Aug 28, 2026

@github-actions
github-actionsbot
on Aug 28, 2026 – with GitHub Actions

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment if you think it's still relevant.

github-actions
added
Stale
on Aug 28, 2026
mattrpav
removed
Stale
on Aug 28, 2026
mattrpav
added 4 commits that reference this issue on Sep 3, 2026

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

1563c9b

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

9844c3a

[apache#2132] SSL modernization, no ThreadLocal, per-transport, pre-n…

1598fee

[#2132] Migrate SSL support away from ThreadLocal, support key alias …

c5e5ab1
mattrpav
moved this from In review to Done in Apache ActiveMQ v6.4.0on Sep 5, 2026
mattrpav
closed this as completedby moving to Done in Apache ActiveMQ v6.4.0on Sep 5, 2026
mattrpav
added the
Feature
issue type on Sep 29, 2026
mattrpav
added this to the 2026 Security hardening milestone on Sep 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Feature

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions