Question
Accenture
IN
Last activity: 8 Jul 2016 7:01 EDT
Is it prossible to use keystore present in data instance for configuring 2 way ssl for connect-java
How to use use keystore present in data instance for configuring 2 way ssl for connect-java
Scenario:
I have created keystore and truststore data instance for my connect-soap, now there is a need to create a connect-java, where in i have to establish connection through the java code using 2 way ssl.
Solution Attempted:
Store the keystore and trust store in the server, and initialize the tomcat level property forkeystore and truststore
Need:
The above solution works fine, but now i need to maintain datainstance of keystore and also the keystore file store on unix server.
Also the disadvantage of storing in the server file is , i have to restart the tomcat whenever the keystore file changes.
As i am already storing the keystore in datainstance , can i use this for connect-java ? and how?
P.S
Pega 7.1.7.
Tomcat Server
Pegasystems Inc.
CA
What are you connecting to using Connect-Java? As with all SSL scenarios, if you want to write your own SSL logic, at a bare minimum you need to create your own SSLContext and SSLSocketFactory. You would need to create Java KeyStore instances corresponding to Pega keystore and truststore data instances. The keystore/truststore data is stored in base 64 encoded form in pyFileSource property. You will have to base64 decode this into byte array and use java.security.KeyStore.load() method to create the Java KeyStore instance.
Before this, it will help if you can elaborate on what you are trying to do with Connect-Java and what you need 2-way SSL for.
Accenture
IN
pyFileSource and java.security.KeyStore.load() seems to be useful, will try some poc with that.
From Connect-Java i am trying a poc where in, i am interacting with a external system that has 2 way ssl configured in it.