SSL certificate for java application

A third-party service is available via https, so how can java app connect to that service?

Truststore and Keystore

Java has two places for save certificate: truststore and keystore

Truststore – for client and public key
Keystore – for private key

In our task we need a truststore

Tools

For SSL certificate use such tools like openssl and keytool from jdk

Example

First of all download certificate from third-party-service.

sudo rm -f thirdPartyCert.pem && sudo echo -n | openssl s_client -showcerts -connect third-party-service:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > thirdPartyCert.pem

Enter fullscreen mode Exit fullscreen mode

Copy current truststore

cp $JAVA_HOME/lib/security/cacerts currentCacerts

Enter fullscreen mode Exit fullscreen mode

Import the new certificate to truststore

keytool -import -trustcacerts -keystore "currentCacerts" -alias third-party-service -file "thirdPartyCert.pem" -storepass changeit

Enter fullscreen mode Exit fullscreen mode

Check certificate

keytool -list -v -keystore currentCacerts -alias third-party-service -storepass changeit

Enter fullscreen mode Exit fullscreen mode

Use the option to add a certificate while launching your app

-Djavax.net.ssl.trustStore=mySuperCacerts

Enter fullscreen mode Exit fullscreen mode

Perfect!

原文链接：SSL certificate for java application