John
Reputation: 11
How to write code for rejecting expired client certificate (self-signed) in spring boot?
I have a server as rest API in spring boot and client is Rest Template present in another spring boot application. Currently, in order to enable https,I have configured server.ssl related properties inside application.proeprties file of server like keystore and truststore details. (It's 2Way SSL)
I want my server to reject expired certificate presented by client.Currently, server is not checking validity date of client certificate automatically.
I am using keystore and truststore in jks format.
How to reject expired client certificates??? I am not able to find code.
Upvotes: 1
Views: 464
Answers (0)
Related Questions
- how to check SSL certificate expiration date programmatically in Java
- Spring Boot - Reading x509 client certificate from HTTP request
- Check X509 certificate revocation status in Spring-Security before authenticating
- Java trustmanager behavior on expired certificates
- How to configure Spring Boot app to accept unknown SSL client certificate?
- Client Certificate Authentication with Spring Boot
- Spring Boot - client server REST API with self-signed certificate
- Spring security x.509 authentication - accept certificates based on their issuer Certificate Authority
- How to disable self signed certificate at client in java?
- validate x509 client certificate