Support a KeyStore implementation

danizen commented 6 years ago

Current Behavior

None of the EncryptionKey.Source implementations are actually a KeyStore.

Desired Behavior

Add a new EncryptionKey.Source that is a keystore. The passwordKey here must be the "alias" for a key stored in the keystore.
Add static functions to EncryptionKeyUtil to "register" the keystore, which has persumably already been loaded and unlocked.
Add configuration elements to downstream projects such as collector core to allow the KeyStore path and its key to be specified somehow.

Snarky Comment

My security people want this, but it is really icing on the cake.

danizen commented 6 years ago

This will have to wait a bit, but if I can fix it later, I will.

danizen commented 6 years ago

I'm no longer a fan. Keystore is no more secure than what norconex has already.

essiembre commented 6 years ago

No problem, thanks for following up.

Norconex / commons-lang