How to use java-sdk to connect to ejbca service

[steven-designlibro]

1. Java-Sdk needs to pass key & cert, but the document never introduces how to get this key & cert.
2. I tried to connect with nodejs, because I needed the P12 file. I created the entity and opened the certificate management interface according to the video method, and the access was still 403.

[primetomas]

Which API do you want to use? EJBCA includes clientToolBox that is WebService CLI, with plenty of sample code.
https://github.com/Keyfactor/ejbca-ce/tree/main/modules/ejbca-ws-cli

For the REST API we have an open source command line client as well, all code is here: https://github.com/Keyfactor/ejbca-easy-rest-client

[dobicinaitis]

If you want to interact with EJBCA from a Spring Boot application, the ejbca-java-client-sdk might suit your needs better.

[steven-designlibro]

If you want to interact with EJBCA from a Spring Boot application, the ejbca-java-client-sdk might suit your needs better.

Yes, you are right. Where is the cert & key file mentioned in the sample code generated? At present, I only have the password of SuperAdmin.p12 and the certificate. I tried to extract the certificate and key from P12, but it can't be used for this sdk.Do you know how to get it? Thank you very much.

[primetomas]

I'd assume that clientcertificate should be the, in this case superadmin, certificate in PEM format. And "key" should be the same "PRIVATE KEY" exported from the P12 file as you mention. Maybe it has to be without the password, "--nodes" option to "openssl pkcs12".

[steven-designlibro]

Thank you for your help. I have extracted certificates and keys in pem format from SuperAdmin, but now I have encountered another problem about SSL. I have tried all the methods I can.


But none of them succeeded.

[primetomas]

Same as #726