动态地将证书添加到“信任库”在 Java EE 中
我有一个 web 应用程序，它通过 servlet（非 ssl）上传来接收证书请求。
CSR 由 web 应用程序签名，并发回给在浏览器中安装证书的用户。
现在，如何使 servlet 容器接受带有新签名证书的 HTTPS 连接？
据我所知，签名的证书必须位于 HTTPS 连接器的“信任库”中，手动执行此操作没有问题。
但是如何在不重新启动容器或弄乱命令行的情况下自动添加它呢？
I have a webapp which receives a certificate request through upload via a servlet (non-ssl).
The CSR is signed by the webapp, and sent back to the user which installs the certificate in their browser.
Now, how do I make the servlet container accept HTTPS connections with the newly signed certificate?
As far as I know, the signed certificate must be located in the HTTPS Connector's "truststore", and that is no problem to do manually.
But how can I add it automatically without restarting the container or messing with the command line?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
我认为你处理问题的方式是错误的。这个想法是在您的服务器端信任库中已经拥有一个根证书。您使用此根证书签署客户端证书。然后，当客户端使用此发出请求时
I think you're approaching the problem the wrong way. The idea is to have a root certificate in your server-side truststore already. You sign client-side certs with this root certificate. Then, when the client makes a request using this