spring 引导中的自签名证书和 SSL

Question

For a schoolproject I have a client and a rest-api. Users log into the client using a login form. When they perform a certain action that makes a call from the client to the API server, the client first sends the username and password through a URL for authentication. The rest-api then sends a JWT token back for the client to use on subsequent calls.

I'm now trying to implement HTTPS to send the username and password for the authentication. I've followed this guide

However the guide uses resttemplate instead of webclient (which I'm using on the client side to call the rest-api endpoints).

So I've generated a pk12 file per the guide and added it to the rest server along with the following properties:

#https config
server.ssl.key-store-type=PKCS12
# The path to the keystore containing the certificate
server.ssl.key-store=classpath:keystore/rideService.p12
# The password used to generate the certificate
server.ssl.key-store-password=geheim
# The alias mapped to the certificate
server.ssl.key-alias=rideService

security.require-ssl=true

This works according to postman.

Now I'm trying to configure the client side but I can't get it to work. I've added the same pk12 file to resources and added the following code to the webclient:

@Bean
    public WebClient createSSLWebClient() throws InvalidAlgorithmParameterException, KeyStoreException, IOException, CertificateException, NoSuchAlgorithmException, UnrecoverableKeyException {
        KeyStore keyStore = KeyStore.getInstance("PKCS12");
        keyStore.load(new FileInputStream(ResourceUtils.getFile(trustStorePath)), trustStorePass.toCharArray());

        KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance("SunX509");
        keyManagerFactory.init(keyStore, trustStorePass.toCharArray());
        SslContext sslContext = SslContextBuilder
                .forClient()
                .keyManager(keyManagerFactory)
                .build();
        HttpClient httpClient = HttpClient.create().secure(t -> t.sslContext(sslContext));
        return WebClient.builder()
                .clientConnector(new ReactorClientHttpConnector(httpClient))
                .filter(logResponse())     // filterfunctie toevoegen aan de WebClient
                .baseUrl(API_BASE_URL)
                .build();
    }

I always get "BAD request". I'm still starting to get my around it all, so I've also tried setting it as a trustmanager, but with the same result...Can anyone enlighten me what I'm doing wrong?

thanks

Answer 1

Have you actually created an SSL certificate for your host? Maybe that's the part you are missing. By a quick look I didnt see the tutorial setting up SSL in the keystore at all.