Generating KeyStores and TrustStore using Keytool and OpenSSL - Part 2
This video is Part 2 of the mutual authentication/2 way SSL using Spring boot. This video is shows how to generate a JKS using Keytools and how to convert the generated pem file or .p12 certificate into JKS which then can be used for 2 way ssl.
Part 1 : Intro to mutual/2-way SSL authentication
• Mutual Authentication ...
Part 3 : Configuring the keystore and truststore in Spring boot application
• HTTP, One way SSL and ...
Medium links
Making certificates to work across Java or Non Java platform a problem?
/ making-certificates-to...
Authentication using Certificates?
/ authentication-using-c...
Required Links
OpenSSL www.openssl.org/
Keytool docs.oracle.com/javase/8/docs...
Java JDK openjdk.org/install/
x509 Extension Configuration Format man.openbsd.org/x509v3.cnf.5
KeyExplorer keystore-explorer.org/
Chapters
00:42 JKS files using Java Keytool
01:00 Generating Server KeyStore
04:30 Generating Client KeyStore
05:28 Extract public cert from Server KeyStore
05:36 Extract public cert from Client KeyStore
06:08 Importing Client public certificate into Server TrustStore
06:33 Importing Server public certificate into Client TrustStore
07:00 Bottleneck of the above - reason for Certificate Authority
07:38 Using Certificate Authority as TrustStore
08:08 Creating Certificate Authority's PEM certificates
09:12 Creating Server certificates
11:41 Creating Client certificates
13:10 Converting the above Server and Client PEM into JKS files
14:45 Importing CA certificate into TrustStore
15:26 Checking the generated files using KeyExplorer
Connect with me in Linkedin at / suriya-prakhash-deenad...
Visit www.suriyaprakhash.com for more info.
Music Credit
pixabay.com/music/future-bass...
Пікірлер: 11
Really nice 👍👍.. please keep posting on spring security advance level end to end project
@suriyaprakhash
Жыл бұрын
Ya sure will😊
Really helpful video but i wish your video is not little interrupted by your image in right below corner..
Thanks for this video.
@suriyaprakhash
Жыл бұрын
You're welcome
Good content. But the background sound is annoying and makes it hard to focus on the content. Having introductory music is fine but it is really not necessary to have it through out the video. Just a suggestion 😊
@suriyaprakhash
Жыл бұрын
Thank you so much for your feedback. I thought the same but later on I added it. I will correct it my next videos!
The location of you face on the screen is awful choice
@suriyaprakhash
Жыл бұрын
Thank you so much...I will take care of it in the next video
if server cert renews do we need to install trust store at client side vice versa if client renews? can u please provide details becuase multiple clients are accessing server each client has it's own cert how it is going to work?
Not at all understandable for a beginner......may be an expert may understand.