我如何获得弹簧保险库信任以PEM为PEM的自定义TLS链
我目前正在使用带有TLS的Spring Vault,这效果很好。我的问题是我需要支持自定义TLS链以连接到客户端的保险库实例。使用JKS不是一个选择,我唯一的选择是使用PEM文件。
我已经读到Spring Vault能够使用PEM文件进行SSL配置,但是我不知道如何... :(
I am currently using Spring Vault with TLS, which works fine. My problem is that I need to support a custom TLS chain to connect to a client's Vault instance. Using a jks is not an option, my only option is to use PEM files.
I've read that Spring Vault is able to use PEM files for its SSL configuration, but I can't figure out how ... :(
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
从技术上讲,您需要自定义强调Web客户端并提供自定义
sslConfiguration
从PEM文件加载证书,并在运行时创建TrustStore。Looking at
VaultAutoConfiguration
you could provide customTechnically you need to customize underlining web client and provide custom
SslConfiguration
loading certificates from PEM files and creating truststore in runtime.Looking at
VaultAutoConfiguration
you could provide customClientFactoryWrapper
bean configured with yourSslConfiguration
.