Issue

• Externalizing those parameters that contain password doesn't work:

    <security-realm name="https">
        <w:server-identities>
            <w:ssl>
                <w:engine enabled-protocols="TLSv1 TLSv1.1 TLSv1.2" ></w:engine>
                <w:keystore path="${karaf.etc}/certs/server.keystore" provider="JKS" alias="server"
                        keystore-password="${org.osgi.service.http.keystore.password}" key-password="${org.osgi.service.http.key-password}"
                        generate-self-signed-certificate-host="localhost" ></w:keystore>
            </w:ssl>
        </w:server-identities>
        <w:authentication>
            <w:truststore path="${karaf.etc}/certs/server.truststore" provider="JKS" keystore-        password="${org.osgi.service.http.truststore.password}" ></w:truststore>
        </w:authentication>
    </security-realm>

org.ops4j.pax.web.cfg :

        org.osgi.service.http.truststore.password=secret
        org.osgi.service.http.key-password=secret
        org.osgi.service.http.keystore.password=secret