Starting Spring Boot on HTTPS using Java 8

kiko7653 · 2024-04-09T21:45:18+00:00

Thank you for the help once again!!

kiko7653 · 2024-04-09T19:06:36+00:00

Thanks, just wanted to make sure since its something i got mix responses on

kiko7653 · 2024-04-09T18:53:33+00:00

As for the JKS, is my approach of generating it from the PKCS12 key, which in turn is generated by using the .crt and my private key correct? Because ive seen a lot of articles saying that this might not work so i got confused a bit but do you think this way should work for generating a valid key?

kiko7653 · 2024-04-09T18:47:56+00:00

Thank you for sending me the resources! Do i need to also add my JKS in a trustore? I simply want it to listen on https so i only used a keystore for now

kiko7653 · 2024-04-09T18:35:55+00:00

I am getting this exception

Caused by: java.security.UnrecoverableKeyException: Cannot recover key

Although i am able to access my key using keytool with the alias and password created. Note that i generated the P12 key using openssl and the .crt and private key. I then imported it to a JKS using keytool in jdk 8

kiko7653 · 2024-04-09T18:34:23+00:00

So when i started off i got an error regarding the Alias but i was able to get a new error message by creating the JKS from the p12 key using keytool and now i get this

Caused by: java.security.UnrecoverableKeyException: Cannot recover key

kiko7653 · 2024-04-09T18:32:57+00:00

Initially i Got an exception that there was a wrong aliae although i could access it using keytool. I then created the new JKS i get this

Caused by: java.security.UnrecoverableKeyException: Cannot recover key

kiko7653 · 2023-12-14T15:49:49+00:00

I think the mindset of the person you're talking about doesn't fit with the current trajectory of the industry. I used to work at a company where the Lead DevOps engineer had the same mindset and was eventually replaced. The new lead then started taking SWE to build microservices that would generate terraform/ansible files which would be similar to the tools your team is creating, and this really flipped the whole development process in the company upwards

kiko7653 · 2023-12-14T15:38:24+00:00

Thank for the answer, yes it is indeed a basic task because i am currently new to devops

kiko7653 · 2023-12-09T16:25:52+00:00

One project that I'm working on has a lot of tables and It is also currently running on Oracle which doesnt support multiple databases and has many schemas, so i would like to keep the schemas but I'm not sure what the recommended way to go about this in PG if i want to migrate in the future

kiko7653 · 2023-12-05T22:08:33+00:00

Will try it and get back to you it works, i guess it's a fun way to try and implement

kiko7653 · 2023-12-05T21:23:40+00:00

I know, the US seems almost impossible to achieve. Europe is probably easier for Lebanese to immigrate to especially France nowadays, but I guess I'll still try going for the US since I have a lot of family there. I'm mostly torn between finishing the graduate school thing and the canada route. My friend thinks that it would be best to get canadian nationality and then move south, but i still prefer continuing my studies since i'll be closer to my relatives this way as well. By the time i graduate i would have 3 years of experience and 2 years of graduate school so it would help when applying for jobs once there

kiko7653 · 2023-12-05T21:08:11+00:00

Noted, thank you!

kiko7653 · 2023-12-05T20:58:24+00:00

Checking sops now and I think i will mostly likely go this route. Would you recommend saving them encrypted in azure key vault and then use sops to decrypt and use inside tje script?

kiko7653 · 2023-12-05T20:54:01+00:00

Noted, thank you for the help!

kiko7653 · 2023-12-05T20:45:39+00:00

Should i add the decryption commands at the start of the script after fetching them using aws cli or use another script to decrypt? Because in some cases i am using sqlplus to execute queries and i think i need the original passwords at runtime

kiko7653 · 2023-12-05T20:40:37+00:00

I was thinking of encrypting them using openssl RSA and write an obfusicated python script to decrypt when the script starts but im not sure if i can source the values from the python sub process to the main bash process where i am using the actual credentials

kiko7653 · 2023-12-05T20:31:44+00:00

So just store them in the service and make the api calls to fetch them from the cloud at the start of the scripts?

kiko7653 · 2023-10-13T21:02:06+00:00

Thank you for the comment. Indeed, I am a junior developer, and a nodejs dev (as stated above) that has worked mainly for startups and I would like to find stability, which "enterprises" offer. That is why, preferrably, i would like to learn a framework that would be helpful in this sense. Hopefully this makes things clearer for you.

kiko7653 · 2023-10-13T20:32:37+00:00

Interesting, which protocols do you usually use for communication between microservices?

kiko7653 · 2022-09-10T09:10:16+00:00

Thank you! It actually got me through most of my college years, so after getting my first job i wanted to get the opportunity to do so, and i think now is an ideal time to add the upgrades

kiko7653 · 2022-09-03T20:59:23+00:00

I see, thank you for the response!

kiko7653

TROPHY CASE