How to make web application accessible from https in java

Question

I want to make a web application accessible from https in java. I am new to this area. I read from some blog that this can be done by creating some kind of certificate for identification. Is there any website that provides a free certificate? May I have any blog or website for links.

thank

Answer 1

You will need an SSL certificate to service the SSL application. The problem with the SSL certificate is that the browser needs to be trusted by the browser, so if you have people using the application, you need to get a real SSL certificate from a certificate provider, such as Godaddy or many others. For testing purposes, you can make a "self-signed" certificate that can be used, but a client using a browser will receive warnings indicating problems with the certificate.

It is not possible to get a real SSL certificate for free.

I believe in this answer, you can make relevant Google requests to help you.

Answer 2

SSL, CA ( ), , webapp. , , CA. .

. . , 2 . , ():

1. :

, - :

a) java keytool - http://docs.oracle.com/javase/1.4.2/docs/tooldocs/windows/keytool.html b) openssl - http://www.sslshopper.com/article-most-common-openssl-commands.html

, , ( openssl)

2. / .

, / . , , , ...

a) tomcat 7 - http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html

b) - http://artur.ejsmont.org/blog/content/how-to-generate-self-signed-ssl-certificate-for-glassfish-v3-and-import-it-into-java-keyring

c) jbossWeb ( ) - http://docs.jboss.org/jbossweb/3.0.x/ssl-howto.html

Answer 3

, , (Certificate Authority) Let Encrypt. Certbot ACME ( ) https://certbot.eff.org/. root- .

1) Cerbot, certbot-auto script

wget https://dl.eff.org/certbot-auto
chmod a+x ./certbot-auto
./certbot-auto --help

2) , webroot. 80 443, . Webroot .

certbot-auto certonly --standalone --standalone-supported-challenges http-01 -d yourdomain.com

webroot certbot certonly /etc/letencrypt/live/.

3) Let Encrypt ( 90 ),

certbot-auto renew

4) , , PKCS12 Java.

openssl pkcs12 -export -in /etc/letsencrypt/live/yourdomain.com/fullchain.pem -inkey /etc/letsencrypt/live/yourdomain.com/privkey.pem -out /etc/letsenscrypt/live/yourdomain.com/pkcs.p12 -name mytlskeyalias -passout pass:mykeypassword

keytool -keystore /path/to/my/keystore -delete -alias ‘mytlskeyalias’ -storepass ‘mystorepassword’

keytool -importkeystore -deststorepass mystorepassword -destkeypass mykeypassword -destkeystore /path/to/my/keystore -srckeystore /etc/letsencrypt/live/mydomain.com/pkcs.p12 -srcstoretype PKCS12 -srcstorepass mykeypassword -alias mytlskeyalias

https://vaadin.com/blog/-/blogs/enabling-https-in-your-java-server-using-a-free-certificate

, SSL/TLS.

Answer 4

... https://www.cloudbric.com/