Accepting self-signed certificate of Vault inside of Spring application about spring-cloud-config

[ryanjbaxter]

@mp911de do you happen to know?

[mp911de]

If you store your certificate in the trust store, then the client will accept it. In the Spring Cloud Vault CI build we do the same, however we create an own CA to sign certificates with. A YAML config looks like:

spring.cloud.vault.ssl:
  trust-store: file:…
  trust-store-password: changeit

For Vault usage through Spring Cloud Config the config should look like:

spring.cloud.config.vault.ssl:
  trust-store: file:…
  trust-store-password: changeit

[pH-Valiu]

Thank you for the response,

so if I understood correctly, I can use spring.cloud.vault.ssl:trust-store: file:xyz, where xyz is the keystore.jks file from create_certificates.sh?
Or do I get that desired file from somewhere else?
And can I place that specific file relativ to the source code in like a ressource folder and just say:
file:trustStore.store or do I have to give the full path: C:\Project\resources\trustStore.store

[mp911de]

You can either go by relative or absolute paths.