Skip to content

Commit cac8dcf

Browse files
committed
Added demo for InflatableTrustMaterial option
1 parent a920e39 commit cac8dcf

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -577,14 +577,12 @@ server: [GitHub - Instant SSL Reloading](https://github.com/Hakky54/java-tutoria
577577

578578
##### Trust additional new certificates at runtime
579579

580-
Although it is possible to reload the complete trust material as shown before
581-
in [Reloading SSL at runtime](#support-for-reloading-ssl-at-runtime)
580+
Although it is possible to reload the complete trust material as shown before in [Reloading SSL at runtime](#support-for-reloading-ssl-at-runtime)
582581
and [Hot swap KeyManager and TrustManager at runtime](#support-for-swapping-keymanager-and-trustmanager-at-runtime), in
583582
some occasions you might want the trust additional new certificates without reloading all the trust material as it
584583
might be redundant. Especially if you want to keep other trust material intact which is already loaded to your
585584
SSLFactory and you don't want it to be reloaded. An example use case would be using the JDK and OS trusted Certificates
586-
Authorities
587-
and your custom truststore which can grow over time. See below for two examples:
585+
Authorities and your custom truststore which can grow over time. See below for two examples:
588586

589587
##### Option 1
590588

@@ -619,6 +617,9 @@ SSLFactory sslFactory = SSLFactory.builder()
619617

620618
A proof-of-concept is available here: [GitHub - Trust Me](https://github.com/Hakky54/trust-me) which demonstrates how it can be integrated in a GUI and prompting the end-user to either trust or reject the server certificate. It will be applied instantly and the ssl configuration will be reloaded.
621619

620+
##### Demo
621+
![alt text](https://github.com/Hakky54/java-tutorials/blob/main/trust-me/images/demo.gif?raw=true)
622+
622623
##### Routing identity material to specific host
623624

624625
It may occur that the client is sending the wrong certificate to the server when using multiple identities. This will

0 commit comments

Comments
 (0)