Play Framework: Keystore for internal web services

We are trying to set up Play to talk with our internal CRM. All our previous applications were written as part of the JSF overkill (ICEfaces), but they worked perfectly in conversation with our CRM, since JSF applications were deployed in a box of sea fish, where we had certificates for glass fish that we could communicate with with our CRM web service.

Now we are trying to get the game to do the same, and we have a bit of complexity, since we want to run game applications on netty. How to get certificates imported to the keystore (or similar) so that they can communicate with our CRM? Since CRM is internal to our corporation, certificates are self-signed and distributed as needed.

I tried the following in the game's configuration file - but I'm not so sure, as these configuration properties seem more to the playback server itself, and not to the playback application to communicate with another service.

# Keystore trustmanager.algorithm=jks ssl.KeyManagerFactory.algorithm=SunX509 keystore.algorithm=jks keystore.password=changeit keystore.file=conf/cacerts.jks 

One of our other developers was able to get this to work, but we had to put it directly into our code, which is not perfect.

 System.setProperty("javax.net.ssl.trustStore", "C:/webapps/playapp1/cacerts.jks"); System.setProperty("javax.net.ssl.trustStorePassword", "changeit"); System.setProperty("javax.net.ssl.keyStoreType", "jks"); System.setProperty("javax.net.ssl.keyStore", "C:/webapps/playapp1/keystore.jks"); System.setProperty("javax.net.ssl.keyStorePassword", "changeit"); 

As a note, our CRM creates a jar file that we throw in our JSF or play applications that wrap the web service for us, so we don’t need to create client code for each service (similar to the bank that you downloaded, for example, Amazon S3 service ) This service bank uses Jersey under XML / Rest communication back to our service. It works great in a gaming environment when we do not use SSL.

+4
source share
1 answer

What version of the game are you using? I know that I really had to recompile playframework because it disabled secure support. But I think it was version 1.1

0
source

Source: https://habr.com/ru/post/1412673/


All Articles