Generating KeyStores and TrustStore using Keytool and OpenSSL - Part 2

preview_player
Показать описание
This video is Part 2 of the mutual authentication/2 way SSL using Spring boot. This video is shows how to generate a JKS using Keytools and how to convert the generated pem file or .p12 certificate into JKS which then can be used for 2 way ssl.

Part 1 : Intro to mutual/2-way SSL authentication

Part 3 : Configuring the keystore and truststore in Spring boot application

Medium links
Making certificates to work across Java or Non Java platform a problem?
Authentication using Certificates?

Required Links

Chapters
00:42 JKS files using Java Keytool
01:00 Generating Server KeyStore
04:30 Generating Client KeyStore
05:28 Extract public cert from Server KeyStore
05:36 Extract public cert from Client KeyStore
06:08 Importing Client public certificate into Server TrustStore
06:33 Importing Server public certificate into Client TrustStore
07:00 Bottleneck of the above - reason for Certificate Authority
07:38 Using Certificate Authority as TrustStore
08:08 Creating Certificate Authority's PEM certificates
09:12 Creating Server certificates
11:41 Creating Client certificates
13:10 Converting the above Server and Client PEM into JKS files
14:45 Importing CA certificate into TrustStore
15:26 Checking the generated files using KeyExplorer

Music Credit
Рекомендации по теме
Комментарии
Автор

Really nice 👍👍.. please keep posting on spring security advance level end to end project

RaviYadav-cxpb
Автор

Really helpful video but i wish your video is not little interrupted by your image in right below corner..

farrukhahmedsid
Автор

Good content. But the background sound is annoying and makes it hard to focus on the content.

Having introductory music is fine but it is really not necessary to have it through out the video. Just a suggestion 😊

Kavita-kxoh
Автор

The location of you face on the screen is awful choice

shai
Автор

Not at all understandable for a be an expert may understand.

yxrlysf
Автор

if server cert renews do we need to install trust store at client side vice versa if client renews? can u please provide details becuase multiple clients are accessing server each client has it's own cert how it is going to work?

ScoobyDoo-ctnd