B4J Question [server] Using keystore.p12 instead of jks

[aeric]

Java (since Java 9) have officially deprecated the proprietary JKS format in favor of the industry-standard PKCS12 (.p12 / .pfx) format.

We can use LetsEncrypt to generate the keystore.p12 file.

root@hostname:/etc/letsencrypt/live/domain.com#openssl pkcs12 -export -out /home/keystore.p12 -in fullchain.pem -inkey privkey.pem -name jetty

C:\laragon\bin\apache\httpd-2.4.68-260617-Win64-VS18\bin>openssl pkcs12 -export -out C:\Projects\EndsMeet\source\Objects\keystore.p12 -in C:\laragon\etc\ssl\laragon.crt -inkey C:\laragon\etc\ssl\laragon.key -name jetty

We can also use JDK keytool to create our self-signed keystore.p12?

C:\Java\jdk-19.0.2\bin\keytool -genkeypair -alias jetty -keyalg RSA -keysize 2048 -keystore keystore.p12 -storetype PKCS12 -validity 3650

Then we can use it directly in B4J server to provide ssl connection (without need to convert it to jks format).

Private Sub ConfigureSSL (SslPort As Int)
   'example of SSL connector configuration
   Dim ssl As SslConfiguration
   ssl.Initialize
   ssl.SetKeyStorePath(File.DirApp, "keystore.p12") 'path to keystore file
   ssl.KeyStorePassword = "123456"
   ssl.KeyManagerPassword = "654321"
   srvr.SetSslConfiguration(ssl, SslPort)
   'add filter to redirect all traffic from http to https (optional)
   srvr.AddFilter("/*", "HttpsFilter", False)
End Sub

https://www.b4x.com/android/forum/threads/server-ssl-connections.40130/

Am I right?

 

[Erel]

Looks good. And if you want the server to reload the certificate: https://www.b4x.com/android/forum/threads/server-letsencrypt-ssl-certificates.159285/#content

 

[aeric]

Please also check my updated tutorial post #26

[Server] Using Let's Encrypt on Ubuntu VPS

Update: Please check post #26 #1 How to: Install Let's Encrypt on Ubuntu Linux VPS to Create SSL Certificates Downloading and Installing Let's Encrypt 1. Update the server's packages apt-get update & sudo apt-get upgrade 2. Install the GIT package apt-get install git 3. Download a clone of...

www.b4x.com