Why do we have to play with keystores to start an https server? • Java Bien!

If you develop in Java and want to start an httpS server, more often than not, you end up trying to understand how to put your certificates into a keystore. That’s a lot of frustration.

If you know nginx, the configuration for an SSL proxy is so simple:

server {
    listen 443;
    ssl on;
    ssl_certificate /etc/nginx/keys/domain.crt;
    ssl_certificate_key /etc/nginx/keys/domain.key;

    location / {
        proxy_pass http://localhost:8080;
    }
}

That’d be so nice to just give those two files, the certificate and the key, and let the web server work things out.

That’s exactly what I’ve implemented in fluent-http. Here’s the code to start an http server:

import net.codestory.http.*;

public class HelloWorld {
  public static void main(String[] args) {
    new WebServer().start();
  }
}

Here’s the code to start an https server:

import net.codestory.http.*;

public class HelloWorld {
  public static void main(String[] args) {
    new Webserver().startSSL(9443, Paths.get("server.crt"), Paths.get("server.der"));
  }
}