How to use TLS_PSK in java on both server side and client side

Question

i want to use TLS-PSK on both server side and client side in java. I have found a few tutorials which gives instructions to use it on client side. But i dont have any clue for using it on server side.

Do i need to do any configuration changes in jetty/apache server for it

Java 8 enhancement says, TLS 1.1 and TLS 1.2 on the client by default.

Plz give me any guidence about it.

or can anyone give any way to confirm , if there is no support for it in java on server side.

Answer 1

JSSE imeplements TLS protocol for Java, uses JCA internally. TLS is much more than just PSK, it uses Cipher suites for authorization, cofidentiality etc...

if you want just PSK, then in order to build a key from shared secret, the key derivation function should be used. Use symmetric key algorithm for that. https://www.flexiprovider.de/examples/ExampleCrypt.html

Then, send encoded data, however you want.