https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NETCONF-1237 netconf <p>SslHandlerFactory is currently a @FunctionalInterface, which leads to a lot of code duplication.</p> <p>Looking at the state of affairs we have ended up after the initial conversion, we need to refactor it.</p> <p>SslHandlerFactory should be an abstract class, which provide an <b>internal</b> API to bind SslHandler. The public API is exposed via a protected method which returns an SslContext &#8211; and internal take care of creating the actual SslHandler.</p> <p>This leads to friction with SslHandlerFactoryProvider, which operates in terms of an internally-created KeyStore and then instantiates SSLEngine &#8211; and then wraps it into a SslHandler.</p> <p>The provider needs to be thoroughly refactored, so that we use a SslContextBuilder and populate it with the trust chains and private keys/certificate chains. We should hold on to this context for as long as allowedKeys do not change and reuse across devices.</p> NETCONF-1237

Refactor SslHandlerFactory

Sub-task NETCONF-590 Medium In Review Unresolved Robert Varga Robert Varga pt Sun, 28 Jan 2024 19:24:37 +0000 Sun, 4 Feb 2024 15:11:40 +0000 7.0.0 netconf-client-mdsal transport 0 2 <p>For netconf-7.0.0 we do not go the whole way and still retain the intermediate KeyStore. This will be addressed separately, as it now is an implementation detail.</p> Development Rank 0|i047dr: