Spring Rest Template SSLContext

Question

Spring Rest Template SSLContext

Jeet Jangir 1

Sep 5, 2023, 11:02 AM

In the below code, what is the value of AzureKeyVault

KeyStore azureKeyVaultKeyStore = KeyStore.getInstance("AzureKeyVault");

 @GetMapping(value = "/ssl-test-outbound")
    public String outbound() throws Exception {
        KeyStore azureKeyVaultKeyStore = KeyStore.getInstance("AzureKeyVault");
        KeyVaultLoadStoreParameter parameter = new KeyVaultLoadStoreParameter(
            System.getProperty("azure.keyvault.uri"));
        azureKeyVaultKeyStore.load(parameter);
        SSLContext sslContext = SSLContexts.custom()
                                           .loadTrustMaterial(azureKeyVaultKeyStore, null)
                                           .build();

        HostnameVerifier allowAll = (String hostName, SSLSession session) -> true;
        SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext, allowAll);

        CloseableHttpClient httpClient = HttpClients.custom()
            .setSSLSocketFactory(csf)
            .build();

        HttpComponentsClientHttpRequestFactory requestFactory =
            new HttpComponentsClientHttpRequestFactory();

        requestFactory.setHttpClient(httpClient);
        RestTemplate restTemplate = new RestTemplate(requestFactory);
        String sslTest = "https://localhost:8443/ssl-test";

        ResponseEntity<String> response
            = restTemplate.getForEntity(sslTest, String.class);

https://learn.microsoft.com/en-us/azure/developer/java/spring-framework/configure-spring-boot-starter-java-app-with-azure-key-vault-certificates

1 answer

Your answer

Answer 1

JessicaH-MSFT 251 Microsoft Employee

Sep 5, 2023, 11:12 PM

Hi @Jeet!

"AzureKeyVault" in KeyStore azureKeyVaultKeyStore = KeyStore.getInstance("AzureKeyVault") is part of the Key Vault Credentials that enable the Spring Boot app to perform the load action for the TLS/SSL certificate. These credentials are set in the application.properties configuration file.

In the application.properties configuration file, the only properties that need to be supplied by you are the server.ssl.key-alias and the azure.keyvault.uri. Both the server.ssl.key-store-type and the server.ssl.trust-store-type must be the value "AzureKeyVault" and do not require any further value be provided.

I hope this helps!

Best,
Jessica

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.

Jeet Jangir 1 Reputation point

Sep 6, 2023, 9:19 AM

I know that,

I want this("AzureKeyVault") value from the Azure key vault

& where to check AzureKeyVault values?
JessicaH-MSFT 251 Reputation points Microsoft Employee

Sep 6, 2023, 6:44 PM

Jeet,

Can you tell me more about your goals and how you'd like to work with the AzureKeyVault value?

Here's more information that might be helpful without me knowing your use case:

The value of AzureKeyVault is the type of the KeyStore that is being created.

If you'd like to output the value of the KeyStore.getInstance method, it can be printed to the console.

Here's an example:

KeyStore azureKeyVaultKeyStore = KeyStore.getInstance("AzureKeyVault"); System.out.println("KeyStore type: " + azureKeyVaultKeyStore.getType());

This will output the type of the KeyStore to the console. In this case, it will output "AzureKeyVault".

How it works:
` KeyStore azureKeyVaultKeyStore = KeyStore.getInstance("AzureKeyVault");` creates a KeyStore instance with the type "AzureKeyVault". This KeyStore is then loaded with the KeyVaultLoadStoreParameter, which is initialized with the URI of the Azure Key Vault instance. The SSLContext is then created using this KeyStore, and the SSLConnectionSocketFactory is initialized with this SSLContext. Finally, the CloseableHttpClient is created using this SSLConnectionSocketFactory.
Jeet Jangir 1 Reputation point

Sep 7, 2023, 8:38 AM

I want this "AzureKeyVault" only

The future is yours

Share via

Spring Rest Template SSLContext

In the below code, what is the value of AzureKeyVault

1 answer

Your answer