How to configure a Java Application to use a Java keystore

PREREQUISITES

    Before you begin, you must have the following:

  • an application certificate Java keystore.
    If you do not have an application certificate Java keystore, click here for instructions on how to create an application certificate Java keystore.
  • a trusted server Java keystore.
    If you do not have a Trusted Server Java keystore, click here for instructions on how to create a trusted server Java keystore.

1. Using the keystores with a Java application.

To use the application certificate and serverTrustStore keystore (created in the above sections) with a web application, add the following 4 lines of java code somewhere prior to making the first call to the web application.

    System.setProperty("javax.net.ssl.keyStore", KeyStoreFile);
    System.setProperty("javax.net.ssl.keyStorePassword",keyStorePasswor);
    System.setProperty("javax.net.ssl.trustStore", ServerTrustStoreFile);
    System.setProperty("javax.net.ssl.trustStorePassword",ServerTrustStorePassword);

where:
    The KeyStoreFile is a Java String containing the path to and filename of the application certificate keystore file.
    The KeystorePassword is a Java String containing the application certificate keystore's password.
    The ServerTrustStoreFile is a Java String containing the path to and filename of the server trust store file.
    The ServerTrustStorePassword is a Java String containing the server trust store password.

If the application certificate is going to be used with and ISDA web service, the application certificate's CN must be entered into the web service access control list.

Email ISDA application administrators at map-support@mit.edu. In the body for your email, give the CN of the application certificate, the web services for which you are requesting activation and the servers that you want access to (production or staging servers).