SSL certificate for java application

A third-party service is available via https, so how can java app connect to that service?

Truststore and Keystore

Java has two places for save certificate: truststore and keystore

Truststore – for client and public key
Keystore – for priv…

A third-party service is available via https, so how can java app connect to that service?



Truststore and Keystore

Java has two places for save certificate: truststore and keystore

Truststore – for client and public key
Keystore – for private key

In our task we need a truststore



Tools

For SSL certificate use such tools like openssl and keytool from jdk



Example

First of all download certificate from third-party-service.

sudo rm -f thirdPartyCert.pem && sudo echo -n | openssl s_client -showcerts -connect third-party-service:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > thirdPartyCert.pem

Copy current truststore

cp $JAVA_HOME/lib/security/cacerts currentCacerts

Import the new certificate to truststore

keytool -import -trustcacerts -keystore "currentCacerts" -alias third-party-service -file "thirdPartyCert.pem" -storepass changeit

Check certificate

keytool -list -v -keystore currentCacerts -alias third-party-service -storepass changeit

Use the option to add a certificate while launching your app

-Djavax.net.ssl.trustStore=mySuperCacerts

Perfect!
Alt Text


Print Share Comment Cite Upload Translate
APA
Artem | Sciencx (2024-03-28T22:56:28+00:00) » SSL certificate for java application. Retrieved from https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/.
MLA
" » SSL certificate for java application." Artem | Sciencx - Wednesday April 28, 2021, https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/
HARVARD
Artem | Sciencx Wednesday April 28, 2021 » SSL certificate for java application., viewed 2024-03-28T22:56:28+00:00,<https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/>
VANCOUVER
Artem | Sciencx - » SSL certificate for java application. [Internet]. [Accessed 2024-03-28T22:56:28+00:00]. Available from: https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/
CHICAGO
" » SSL certificate for java application." Artem | Sciencx - Accessed 2024-03-28T22:56:28+00:00. https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/
IEEE
" » SSL certificate for java application." Artem | Sciencx [Online]. Available: https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/. [Accessed: 2024-03-28T22:56:28+00:00]
rf:citation
» SSL certificate for java application | Artem | Sciencx | https://www.scien.cx/2021/04/28/ssl-certificate-for-java-application/ | 2024-03-28T22:56:28+00:00
https://github.com/addpipe/simple-recorderjs-demo