Java programmatically create keystore and truststore and import certificates into it

In this video we are going to setup keystore + truststore and then load certificates in it programmatically.

00:08 What is the difference between keytool, truststore and keystore

03:20 What is the difference between truststore and keystore
https://docs.oracle.com/cd/E19509-01/820-3503/ggffo/index.html

03:56 Please Like and Subscribe !

04:04 Get Code from github
https://github.com/chandnarahul/create_truststore_keystore_using_code_example

04:42 Going through code in InteliJ

05:56 Preparation for solving PKIX by downloading Intermediate and Root Certificates

06:48 Reproduce PKIX exception running First Junit test case

07:22 Explain TrustStore code

09:28 Re-Run First testcase after setup to resolve PKIX exception

10:07 Preparation for second test case by downloading Root + Intermediate certificates and adding them to the project

10:19 Going through project README.md for Links

12:25 Adding Client Cert to solve for Http code 400

12:30 Going through KeyStore code

12:54 Adding p12 to temporary KeyStore via code

14:57 Explaning @After annotation which removes truststore and keystore from temp directory

15:20 Going through what we have covered till now

15:35 If you received pem file with key and cert then saving them separately

17:13 Convert base key to unencrypted PKCS8 DER format and using it in code

18:28 What I meant when I said DER is binary

19:43 Convert base key to unencrypted PKCS8 PEM format and using it in code

20:10 Difference in PKCS formats https://sslhow.com/pkcs8-vs-pkcs1-vs-pkcs12

20:19 Using git bash to convert base key to PKCS8 no-encryption pem format

20:37 Code needs key in DER format so adding method to convert PEM to DER

21:53 Convert base key to encrypted PKCS8 3DES PEM format with password as badssl.com and using it in code

23:30 Convert base key to encrypted PKCS8 AES PEM format with password as badssl.com
For using AES key with java8 please download Unlimited Strength Jurisdiction Policy Files https://www.oracle.com/java/technologies/javase-jce8-downloads.html

23:52 Explaining why we need to use BouncyCastle dependency for AES encrypted key

24:30 How to use BouncyCastle to read AES encrypted key

25:45 Using Bouncy castle to certificate and key from pem file directly


Supporting Links

https://badssl.com/

https://self-signed.badssl.com

https://badssl.com/download/

https://sslhow.com/pkcs8-vs-pkcs1-vs-pkcs12

https://www.openssl.org/docs/man1.1.1/man1/openssl-pkcs8.html

https://www.oracle.com/java/technologies/javase-jce8-downloads.html

Google Searches

https://stackoverflow.com/questions/12507277/how-to-fix-unable-to-write-random-state-in-openssl

https://www.thesslstore.com/blog/how-to-convert-a-certificate-to-the-correct-format/

https://stackoverflow.com/questions/21173929/convert-rsa-pem-key-string-to-der-byte

https://www.baeldung.com/java-read-pem-file-keys


Channel #Rahul Random Learnings #RahulRandomLearnings #RahulRandom Learnings

Opinion Disclaimer:
The views and opinions expressed here are my own and not the views of my employer.
The content uploaded on my channel is not intended to malign any religion, ethic group, club, organization, company, individual or anyone or anything.