Java programmatically create truststore and import certificates into it

In this video we are going to setup truststore and then load certificates in it programmatically.
Up till now we were manually generating truststore and then loading certs in it, doing it using code means that, instead of opening a command prompt or git bash or a terminal window then using keytool to generate a truststore and then importing all certificates one by one, we will simply use code to generate a truststore and then load all certs using a loop.
truststore will be generated in-memory we will then we will write it to disk.
Once it is saved to a location, we will then set that location in java system properties and then use the saved truststore to connect to the URL that is giving us the PKIX or SSL Handshake exception.

Now I will be creating the truststore and then storing it in temp directory, as once the connection is complete, I will then use java File class to delete the file on exit.
This approach is helpful if you want to simply add certs to a location and want all certs to be auto loaded when program runs, this way when a cert expires you can simply update the cert and trigger a redeploy.

We will use java system property to get the temp folder, java separator to automatically apply the correct path separator like forward or backslash depending on the OS the program is running and auto closable logic to automatically close the file writers once the truststore is written.

Channel #Rahul Random Learnings #RahulRandomLearnings #RahulRandom Learnings Opinion Disclaimer:
The views and opinions expressed here are my own and not the views of my employer.
The content uploaded on my channel is not intended to malign any religion, ethic group, club, organization, company, individual or anyone or anything.

[rahulrandomlearnings]

Based on below comments/requests I have created video to programmatically create KeyStore + TrustStore and import certificates into it.

This covers how to add p12 into keystore and multiple key formats.

[asadnayani]

Nicely explained. Covering relevant details.

[Pooja-mlop]

Nicely Explained, good example! Thanks!

[devpriya]

what is truststorepath?? and why its needed since cert file is already loaded as filestream..

[snoopygr]

Let's say we have a lot of Intermediate and Root certificates. Can we dynamically download these certs so as not to do it manually through the browser? If so, how often is this practiced in reality?🤔

[mannepallisreenivasulu]

And i have one doubt, need to verify trusted certificate with the server shared certificate right, please share code related to it.

[archanayuvaraj]

We are using spring boot application, we want to disable SSL certificate validation in code, is that possible?

[abhilashp]

Hi Rahul, thanks for the information 👏👏
how to add the jks file to trusted keys in jdk? please provide the keytool commands for creating .jks from .cer file

[irshadmohammedyakubkhan]

Hi Rahul i am getting Keystore was tampered with, or password was incorrect any idea about this error

[brahmadarapaneni]

@rahul why we need to take root certs only, why not secondary certs?

[brahmadarapaneni]

If we can access with root certs, then why we have intermediate certs Rahul?

[heliocavadissa]

Thank you for the video. So that means that we can deploy the code without having to worry whether the server that we are hosting our application allows htpps requests or not?
Lets say that my app ins on Kubernetes or widfly but I can't set the https/ssl there, but I can setup a keystore localy like in your previous video, now I can run it locally but I will still facing PKIX problem when they deploy it. So the alternative is the aproach you used in this video, since the certificate is in the project directory and will be deployed along with the code?

[brahmadarapaneni]

Does api certs and browser certs are same?

[pabbusrinu]

Hello Rahul, what to do if I have one cer & one key file but key file having so much length how will i do config java code

[dost-malone]

Hey I am getting this error JKS not found
What should I do to resolve this. Thanks in advance.

[gopalrao]

What if I have a pfx file with a private key instead of .cer? What changes do I need to do in that case?

[amrutapatil]

Hi Rahul, what to do if I have multiple cer & one key file

[AhmedKhaled-hemf]

Please I got this error:
SSLHandshakeException: Received fatal alert: handshake_failure

Please any help what can be ?

[AhmedKhaled-hemf]

Thanks very much
Please can we get your source code Java ?