Add JKS keystore support to X509Authentication

[devin-ai-integration]

Add JKS keystore support to X509Authentication

Summary

This PR adds JKS keystore support to the X509Authentication class while preserving all existing PEM-based functionality. The implementation adds a new public method configureX509AuthenticationFromKeystore that takes a keystore path, password, and certificate alias, then extracts the certificate and private key to create an SSL context.

Key Changes:

• New configureX509AuthenticationFromKeystore method for JKS keystore support
• New createSSLContextFromKeystore helper method that handles keystore loading and certificate extraction
• Proper error handling for missing certificates, invalid aliases, and keystore access failures
• Reuses existing createSSLContextFromKeyAndCert method to maintain consistency with PEM implementation

Review & Testing Checklist for Human

⚠️ IMPORTANT: This code has not been compiled or tested due to build environment issues. The following items are critical to verify:

• End-to-end testing: Create a test JKS keystore and verify the new method works correctly with real certificates
• Error handling verification: Test scenarios with missing certificate aliases, wrong passwords, and corrupted keystores
• Integration testing: Verify this doesn't break existing PEM-based X.509 authentication
• Security review: Review keystore password handling and ensure no sensitive data leaks in logs
• API integration: Consider how this will be called from the main JDBC connection flow (currently only added to the utility class)

Test Plan Recommendation

1. Create a test JKS keystore with a known certificate and alias
2. Call configureX509AuthenticationFromKeystore with valid parameters and verify SSL context creation
3. Test error cases: wrong alias, wrong password, missing keystore file
4. Verify existing PEM tests still pass

Notes

• Link to Devin run: https://app.devin.ai/sessions/9c0cf9c618954421999c2005c0a6da38
• Requested by: @nbagnard
• ⚠️ Limitation: This implementation only extends the X509Authentication utility class. Integration with connection properties (to make it callable from JDBC URLs) was not implemented per user request to focus only on the utility class.
• Architecture: The new method follows the same patterns as the existing PEM implementation and reuses the same SSL context creation logic for consistency.

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring