Home/ Questions/Q 764207
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-14T16:41:15+00:00

I’m trying to understand what’s going on in this code . KeyStore trustStore =

  • 0

I’m trying to understand what’s going on in this code.

KeyStore trustStore  = KeyStore.getInstance(KeyStore.getDefaultType());        
FileInputStream instream = new FileInputStream(new File("my.keystore")); 
try {
    trustStore.load(instream, "nopassword".toCharArray());
} finally {
    instream.close();
}

SSLSocketFactory socketFactory = new SSLSocketFactory(trustStore);
Scheme sch = new Scheme("https", socketFactory, 443);
httpclient.getConnectionManager().getSchemeRegistry().register(sch);

My Questions:

trustStore.load(instream, "nopassword".toCharArray()); is doing what exactly? From reading the documentation load() will load KeyStore data from an input stream (which is just an empty file we just created), using some arbitrary “nopassword”. Why not just load it with null as the InputStream parameter and an empty string as the password field?

And then what is happening when this empty KeyStore is being passed to the SSLSocketFactory constructor? What’s the result of such an operation?

Or — is this simply an example where in a real application you would have to actually put a reference to an existing keystore file / password?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Or — is this simply an example where in a real application you would have to actually put a reference to an existing keystore file / password?

    It really looks that way. There is no "my.keystore" file distributed in either the binary or source distributions of HttpClient 4.0.1. For this to run you would create an actual keystore. You could use either keytool or Portecle.

    This example is showing you how to utilize a different trust store than the one that the JVM uses by default ($JAVA_HOME/jre/lib/security/cacerts) for this instance of DefaultHttpClient. This is useful when an SSL site is using a certificate signed by their own in-house certificate authority. The SSL connection will only be established when the signer of the server certificate is recognized. The Wikipedia entry on TLS is a decent introduction if you are unfamiliar with the concept.

    • 0