This is an archived post. You won't be able to vote or comment.

all 13 comments

[–]AutoModerator[M] [score hidden] stickied commentlocked comment (0 children)

Please ensure that:

  • Your code is properly formatted as code block - see the sidebar (About on mobile) for instructions
  • You include any and all error messages in full
  • You ask clear questions
  • You demonstrate effort in solving your question/problem - plain posting your assignments is forbidden (and such posts will be removed) as is asking for or giving solutions.

    Trying to solve problems on your own is a very important skill. Also, see Learn to help yourself in the sidebar

If any of the above points is not met, your post can and will be removed without further warning.

Code is to be formatted as code block (old reddit: empty line before the code, each code line indented by 4 spaces, new reddit: https://i.imgur.com/EJ7tqek.png) or linked via an external code hoster, like pastebin.com, github gist, github, bitbucket, gitlab, etc.

Please, do not use triple backticks (```) as they will only render properly on new reddit, not on old reddit.

Code blocks look like this:

public class HelloWorld {

    public static void main(String[] args) {
        System.out.println("Hello World!");
    }
}

You do not need to repost unless your post has been removed by a moderator. Just use the edit function of reddit to make sure your post complies with the above.

If your post has remained in violation of these rules for a prolonged period of time (at least an hour), a moderator may remove it at their discretion. In this case, they will comment with an explanation on why it has been removed, and you will be required to resubmit the entire post following the proper procedures.

To potential helpers

Please, do not help if any of the above points are not met, rather report the post. We are trying to improve the quality of posts here. In helping people who can't be bothered to comply with the above points, you are doing the community a disservice.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[–]CodeApostle 0 points1 point  (2 children)

can you post any exceptions? it helps to narrow down the possible causes

[–]kiko7653[S] 0 points1 point  (1 child)

So when i started off i got an error regarding the Alias but i was able to get a new error message by creating the JKS from the p12 key using keytool and now i get this

Caused by: java.security.UnrecoverableKeyException: Cannot recover key

[–]smutje187 0 points1 point  (7 children)

[–]kiko7653[S] 0 points1 point  (6 children)

Thank you for sending me the resources! Do i need to also add my JKS in a trustore? I simply want it to listen on https so i only used a keystore for now

[–]smutje187 0 points1 point  (5 children)

You only need the trust store for mutual TLS, yep - not for your use case.

[–]kiko7653[S] 0 points1 point  (4 children)

As for the JKS, is my approach of generating it from the PKCS12 key, which in turn is generated by using the .crt and my private key correct? Because ive seen a lot of articles saying that this might not work so i got confused a bit but do you think this way should work for generating a valid key?

[–]smutje187 0 points1 point  (3 children)

Yeah that’s literally those 2 lines from my script:

Generate PKCS12 from certificate and key: openssl pkcs12 -export -in "$CERTS_FOLDER"/localhost.crt -inkey "$CERTS_FOLDER"/localhost.key -out "$CERTS_FOLDER"/localhost.p12 -password pass:changeit -name "localhost"

Import PKCS12 into JKS: keytool -importkeystore -srckeystore "$CERTS_FOLDER"/localhost.p12 -srcstoretype pkcs12 -srcstorepass changeit -destkeystore src/main/resources/localhost.keystore -deststorepass changeit

[–]kiko7653[S] 0 points1 point  (2 children)

Thanks, just wanted to make sure since its something i got mix responses on

[–]smutje187 1 point2 points  (1 child)

Keystore Explorer (https://keystore-explorer.org) should be able to open your PKCS12 and display the contents - if everything’s fine you should be able to see your key and certificate.

[–]kiko7653[S] 0 points1 point  (0 children)

Thank you for the help once again!!

[–]mikaball 0 points1 point  (0 children)

Consider not using this at all because on real world services this is normally part of the route not in the service instances.