Skip to main content

Use Client Certificate Authentication with Java and RestTemplate

As a follow up of the http://gochev.blogspot.com/2019/04/convert-pfx-certificate-to-jks-p12-crt.html we now have a keystore and a truststore (if anyone needs) and we will use this keystore to send client side authentication using Spring's RestTemplate .

 First copy your keystore.jks and truststore.jks in your classpath, no one wants absolute paths right ?:)

 Again a reminder The difference between truststore and keystore if you are not aware is(quote from the JSSE ref guide): 
TrustManager: Determines whether the remote authentication credentials (and thus the connection) should be trusted.
KeyManager: Determines which authentication credentials to send to the remote host.

 The magic happens in the creation of SSLContext. Keep in mind the Spring Boot have a nice RestTemplateBuilder but I will not gonna use it, because someone of you might have an older version or like me, might just use a plain old amazing Spring.

 If you just want to use the keystore:

 final String allPassword = "123456";
SSLContext sslContext = SSLContextBuilder
                .create()
                .loadKeyMaterial(ResourceUtils.getFile("classpath:keystore.jks"),
                                    allPassword.toCharArray(), allPassword.toCharArray())
                .build();

if you just want to use the truststore

final String allPassword = "123456";
SSLContext sslContext = SSLContextBuilder
                .create()
                .loadTrustMaterial(ResourceUtils.getFile("classpath:truststore.jks"), allPassword.toCharArray())
                .build();

I guess you know how to use both ;), if you want to IGNORE the truststore certificate checking and trust ALL certificates (might be handy for testing purposes and localhost)

final String allPassword = "123456";
TrustStrategy acceptingTrustStrategy = (X509Certificate[] chain, String authType) -> true;
SSLContext sslContext = SSLContextBuilder
                .create()
                .loadTrustMaterial(ResourceUtils.getFile("classpath:truststore.jks"), allPassword.toCharArray())
                .loadTrustMaterial(null, acceptingTrustStrategy) //accept all
                .build();


Ones you have the sslContext you simply do :

HttpClient client = HttpClients.custom()
                                .setSSLContext(sslContext)
                                .build();

 HttpComponentsClientHttpRequestFactory requestFactory =
                new HttpComponentsClientHttpRequestFactory();

 requestFactory.setHttpClient(client);

 RestTemplate restTemplate = new RestTemplate(requestFactory);

 return restTemplate;

And Voala, now each time you make a get/post or exchange with your restTemplate you will send the client side certificate.


Full example (the "tests" version) that sends client side certificate and ignores the SSL certificate







private RestTemplate getRestTemplateClientAuthentication()

                throws IOException, UnrecoverableKeyException, CertificateException, NoSuchAlgorithmException,

                KeyStoreException, KeyManagementException {



    final String allPassword = "123456";

    TrustStrategy acceptingTrustStrategy = (X509Certificate[] chain, String authType) -> true;

    SSLContext sslContext = SSLContextBuilder

                    .create()

                    .loadKeyMaterial(ResourceUtils.getFile("classpath:keystore.jks"),

                                        allPassword.toCharArray(), allPassword.toCharArray())

//.loadTrustMaterial(ResourceUtils.getFile("classpath:truststore.jks"), allPassword.toCharArray())

                    .loadTrustMaterial(null, acceptingTrustStrategy)

                    .build();



    HttpClient client = HttpClients.custom()

                                    .setSSLContext(sslContext)

                                    .build();



    HttpComponentsClientHttpRequestFactory requestFactory =

                    new HttpComponentsClientHttpRequestFactory();



    requestFactory.setHttpClient(client);



    RestTemplate restTemplate = new RestTemplate(requestFactory);



    return restTemplate;

}



Hope this is handy for someone :) Also this should be extremely handy if you integrate BNP Paribas Leasing : ) 












Labels:






































Comments








Post a Comment

















Popular Posts



















Hibernate Generic DAO.




























When you use Hibernate and DAO pattern it is a good idea to use a Generic Base Dao. The fallowing code snippet contains GenericDAO that is a base class for all my DAO classes. This GenericDAO uses HibernateDaoSupport from Spring for its implementation if you want you can use JpaDaoSupport or JdbcDaoSupport in your projects.   My Generic DAO interface looks like this :       package  org.joke.myproject.dao.base;         import  java.io.Serializable;     import  java.util.List;     /**     * @author  Naiden  Gochev     * @param  <E>     * @param  <PK>     */     public  interface  GenericDao<E,PK  extends  Serializable> {         PK save(E newInstance);         void  update(E transientObject);         void  saveOrUpdate(E transientObject);         void  delete(E persistentObject);         E findById(PK id);         List<E> findAll();         List<E> f...




















10 comments









Read more






























JavaEE 5 (JSF + JPA + EJB3) using Eclipse




























Today I will show you how to create Enterprise Application using Java EE 5 and GlassFish.  I will use  - Eclipse 3.5 + WTP  - GlassFish v. 2.1  - JSF Mojarra implementation.  - EJB 3.0.  - JPA Toplink essentials implementation.  - MySQL  No NetBeans or JDeveloper magic involved :)  The prerequirement is:  Add datasource in glassfish. Read this how you can make this here: http://gochev.blogspot.com/2009/10/creating-datasource-in-glassfish-v-21.html   1) First you need to add glassfish in your eclipse.  - Go to Servers View  - Right Click, New  - Choose GlassFish v 2.1 if you dont have glassfish click on Download additional adapters link choose glassfish wait and restart eclipse. Than try again.      2) Create the database    CREATE  TABLE  ` lesson ` . ` USERS `  (   ` id `  INTEGER  UNSIGNED NOT  NULL  AUTO_INCREMENT,   ` username `  VARCHAR ( 45 ) NOT  NULL ,   ` password `  VARCHAR ( 45 ) NOT  NULL ,   ` name `  VARCHAR ( 45 ) NOT  NULL ,   PRIMARY  KEY  ( ` id ` ) ) ENGINE =  InnoDB...




















9 comments









Read more






























Generate JavaDoc with UML diagrams




























In my life many times has happened when I am assigned to a totally new project that I have no idea what it is about, that has to go live in 2 weeks and that I have to fix some issues in this ultra strange code sometimes even code written in different language.   On my question is there any documentation the answer is: Yes but it is very old or no. So in short they want me to start working on a project with no documentation at all.   My second question is is there a javadoc and the anwer is : yeah … kind of … so I am in a project with 30% javadoc with methods in French language for example ( I don’t know even a single word in French) so in short I am loosing 2 weeks to understand what is using what what is the model what is PersonnePhysique  and what is this crazy domain model.   I believe this has happened with everyone of you at least once so what can you do ?      You can start digging into the java code like crazy ( like everyone of us have tried many times)     You can install ...




















2 comments









Read more