Skip to content

Commit 6226f3e

Browse files
Docsp 17220 client specific key trust store (#139)
Co-authored-by: kyuan-mongodb <78768401+kyuan-mongodb@users.noreply.github.com>
1 parent f8d412d commit 6226f3e

File tree

1 file changed

+18
-2
lines changed
  • source/fundamentals/connection

1 file changed

+18
-2
lines changed

source/fundamentals/connection/tls.txt

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -74,8 +74,11 @@ Configure Certificates
7474
Java applications that initiate TLS/SSL requests require access to
7575
cryptographic certificates that prove identity for the application
7676
itself as well as other applications with which the application
77-
interacts. To configure access to these certificates in your application,
78-
you should use the JVM Trust Store and the JVM Key Store.
77+
interacts. You can configure access to these certificates in your application with
78+
the following mechanisms:
79+
80+
- The JVM Trust Store and JVM Key Store
81+
- A Client-Specific Trust Store and Key Store
7982

8083
.. note::
8184

@@ -158,6 +161,19 @@ please refer to the `JSSE Reference Guide
158161

159162
.. _tls-disable-hostname-verification:
160163

164+
Configure a Client-Specific Trust Store and Key Store
165+
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
166+
167+
You can configure a client-specific trust store and key store using the
168+
``init()`` method of the ``SSLContext`` class.
169+
170+
You can find an example showing how to configure a client with an ``SSLContext``
171+
instance in the
172+
:ref:`Customize TLS/SSL Configuration with an SSLContext section of this guide <tls-custom-sslContext>`.
173+
174+
For more information on the ``SSLContext`` class, see the API
175+
documentation for `SSL Context <https://docs.oracle.com/en/java/javase/16/docs/api/java.base/javax/net/ssl/SSLContext.html>`__.
176+
161177
Disable Hostname Verification
162178
-----------------------------
163179

0 commit comments

Comments
 (0)