https://sillysky.net/docs/nyssr/plugins/supplied-plugins/plugin-jars/ny_tcpplugin/ Recent content in NY_TcpPlugIn on sillysky.net Hugo en Thu, 05 Dec 2024 00:00:00 +0000 https://sillysky.net/docs/nyssr/plugins/supplied-plugins/plugin-jars/ny_tcpplugin/requirement-for-a-tls-connection/ Thu, 05 Dec 2024 00:00:00 +0000 https://sillysky.net/docs/nyssr/plugins/supplied-plugins/plugin-jars/ny_tcpplugin/requirement-for-a-tls-connection/ <p>nyssr.net uses <strong>Java 8</strong> to support as many projects as possible. Higher version numbers are of course also supported. <strong>TLS version 1.3</strong> is unfortunately not supported in OpenJDK. However, we use <strong>Eclipse Temurin ™</strong> Java 8, which brings a backport for TLS 1.3.</p> <h2 id="keystore-and-truststore">Keystore and Truststore</h2> <p>To use TLS in version 1.3, we need a keystore and a truststore. Both are given to the VM.</p> <pre class="ss-javacode"><code class="language-batch">-Djavax.net.ssl.keyStore=c:\work\serverkeystore.jks -Djavax.net.ssl.keyStorePassword=password -Djavax.net.ssl.trustStore=c:\work\clienttruststore.jks -Djavax.net.ssl.trustStorePassword=password</code></pre> <p>To create the two files (for development purposes) we use the <strong>Java</strong> keytool. For production, one certainly uses purchased certificates.</p>