How to configure TCP over SSL protocol

[mundrusatish]

Hello,

Since this property "sslTrustAllCertificates" accepts the boolean argument, where and how the java application find the trust and key store, certificates and passwords, to communicate over ssl.

Please explain the configuration of java application to make this work.

~Regards

[pukkaone]

The Java Secure Socket Extension Reference Guide lists Java system properties you can set to configure the truststore, keystore and keystore password.

Assuming you have a CA certificate in a file named ca.crt, you can add the CA certificate to the truststore with the command:

sudo keytool -importcert \
 -noprompt \
 -keystore $JAVA_HOME/jre/lib/security/cacerts \
 -storepass changeit \
 -file ca.crt \
 -alias my.custom.ca

[mundrusatish]

Thanks, its works fine.
Can we externalize the functionality in such a way to read/take the jks/certs file from file system instead of the cacerts.
Exposed this functionality through the property in logback configuration. Would it be required to raise an improvement ticket.

Thanks

[pukkaone]

If you don't want to modify the Java default truststore cacerts file, you can set the javax.net.ssl.trustStore system property to use another truststore.