Set up skeleton. #5
Conversation
|
|
||
| public class Certs { | ||
|
|
||
| final String ROOT_CA = ""; |
There was a problem hiding this comment.
Is there an intermediate CA key or is the root CA key going to sign certificates directly ? (I would argue the former is safer)
There was a problem hiding this comment.
I don't think it makes a big difference in our small scale example. Having an intermediate CA adds just another link in the chain. The system would be equally compromised because I think all the certificates will then be signed with the intermediate certificate?
|
|
||
| public static void main( String[] args ) throws IOException { | ||
|
|
||
| HttpsServer srvr = new HttpsServer("",PORT_NUMBER); |
There was a problem hiding this comment.
I'm guessing the way the server is started now its HTTP and not HTTPS, right ? We would need something like the following before starting the server:
server.makeSecure(NanoHTTPD.makeSSLSocketFactory("/keystore.jks", "password".toCharArray()), null);
There was a problem hiding this comment.
Exactly, before srvr.start() is called, srvr.makeSecure() is executed with (probably) the root certificate used for the web server as well
No description provided.