1// domain containing a single keystore
2domain system {
3    keystore truststore 
4        keystoreType="JKS"
5        keystoreURI="${java.home}/lib/security/cacerts";
6};
7
8// domain containing two JKS keystores
9domain system_plus {
10    keystore truststore 
11        keystoreType="JKS"
12        keystoreURI="${java.home}/lib/security/cacerts";
13    keystore pw_keystore 
14        keystoreType="JKS"
15        keystoreURI="${test.src}/pw.jks";
16};
17
18// domain containing a mixture of keystores
19domain keystores
20    keystoreType="PKCS12" {
21        keystore policy_keystore 
22            keystoreType="JKS"
23            keystoreURI="${test.src}/../PolicyFile/Alias.keystore";
24        keystore pw_keystore 
25            keystoreType="CaseExactJKS"
26            keystoreURI="${test.src}/pw.jks";
27        keystore eckeystore1
28            keystoreURI="${test.src}/../../pkcs11/ec/pkcs12/sect193r1server-rsa1024ca.p12";
29        keystore eckeystore2 
30            keystoreURI="${test.src}/../../pkcs11/ec/pkcs12/secp256r1server-secp384r1ca.p12";
31};
32
33// domain containing a mixture of keystores
34domain keystores_tmp
35    keystoreType="PKCS12" {
36        keystore policy_keystore 
37            keystoreType="JKS"
38            keystoreURI="${user.dir}/Alias.keystore_tmp";
39        keystore pw_keystore 
40            keystoreType="CaseExactJKS"
41            keystoreURI="${user.dir}/pw.jks_tmp";
42        keystore eckeystore1
43            keystoreURI="${user.dir}/sect193r1server-rsa1024ca.p12_tmp";
44        keystore eckeystore2 
45            keystoreURI="${user.dir}/secp256r1server-secp384r1ca.p12_tmp";
46};
47
48// domain where passwords are supplied via environment variables
49domain system_env 
50    keystoreType="JKS"
51    keystorePasswordEnv="KEYSTORE_PWD" {
52        keystore env_keystore
53            keystoreURI="${test.src}/pw.jks";
54        keystore env_truststore
55            keystoreURI="${java.home}/lib/security/cacerts"
56            keystorePasswordEnv="TRUSTSTORE_PWD";
57};
58
59// empty domain
60domain empty
61    keystoreType="JKS"
62    keystoreProviderName="SUN" {
63        keystore empty
64            keystoreURI="${user.dir}/empty.jks";
65};
66