artin/OBP-API
1
0
Fork 0
mirror of https://github.com/OpenBankProject/OBP-API.git synced 2026-02-06 15:47:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor/Enable mTLS for Redis, use p12 instead of jks

Browse Source
This commit is contained in:
Marko Milić 2024-11-24 16:42:55 +01:00
parent b4f3404482
commit b79ea1cbbd
2 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
obp-api/src/main/resources/props/sample.props.template
View File

@ -168,11 +168,13 @@ jwt.use.ssl=false
## Enable mTLS for Redis, if set to true must set paths for the keystore and truststore locations
# redis.use.ssl=false
# Client
# keystore.path.redis = client-keystore.p12
## Client
## PKCS#12 Format: combine private keys and certificates into .p12 files for easier transport
# keystore.path.redis = path/to/client-keystore.p12
# keystore.password.redis = keystore-password
# Server
# truststore.path.redis = path/to/ca.jks
## Trust stores is a list of trusted CA certificates
## Public certificate for the CA (used by clients and servers to validate signatures)
# truststore.path.redis = path/to/ca.p12
# truststore.password.redis = truststore-password

2
obp-api/src/main/scala/code/api/cache/Redis.scala vendored
View File

@ -56,7 +56,7 @@ object Redis extends MdcLoggable {
private def configureSslContext(): SSLContext = {
// Load the CA certificate
val trustStore = KeyStore.getInstance("JKS")
val trustStore = KeyStore.getInstance("PKCS12")
val trustStorePassword = APIUtil.getPropsValue("keystore.password.redis")
.getOrElse(APIUtil.initPasswd).toCharArray
val truststorePath = APIUtil.getPropsValue("truststore.path.redis").getOrElse("")