How reference PKI enabled endpoints in the Admin console

I actually have methods that implement PKCS12, PKCS8 and JKS certificates because I’m using Apache HTTPD as our frontend server. I’ve connected the ESB Admin via AJP (I have this mod also if you want it) and reuse the same certificate throughout the ESB.

With that said I’ve actually just finished implementing this. It’s rough with no exception handling and hard coded but it shows a working version on how this can be done from the code. In summary I created a custom HTTPSSocketFactory that allows me to reference/connect to the external PKI enabled WSDL with the Admin application.
 
I’ve also created a new transport that allows me to reuse all the certificate mentioned above this way I’m not generating certificates all over the place.
 
Package: org.apache.synapse
Class: SynapseConfigUtils.java
Method: public static OMElement getOMElementFromURL(String urlStr)

URL url = getURLFromPath(urlStr);
        if (url == null) {
            return null;
        }
       
        //My Code
        KeyStore keyStore = null;
        KeyStore trustStore = null;
        KeyManagerFactory kmfactory = null;
        TrustManagerFactory trustManagerfactory = null;
     
        try
        {
         //KeyStore
         String location = "c:/Apache2.2/conf/serverKey.pkcs8";
         String certificateFilePath = "c:/Apache2.2/conf/serverCert.pem";
         String storePassword = "12345678";
         String keyPassword = "12345678";
         String alias = "eTest";
         
         IKeyStoreLoader pkcs8KeyStoreLoader = new PKCS8KeyStoreLoader(location, certificateFilePath, storePassword, alias);
   keyStore = pkcs8KeyStoreLoader.getKeyStore();
   
   kmfactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
            kmfactory.init(keyStore, keyPassword.toCharArray());
 
            //Trust Store
            String trustLocation = "c:/Apache2.2/conf/CAs";

            ICACertsLoader caCertsLoader = new CACertsLoader();
   trustStore = caCertsLoader.loadTrustStore(trustLocation);
   
   trustManagerfactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerfactory.init(trustStore);
        }
        catch(Exception ex)
        {
         String exception = ex.getMessage();
        }
      
        InputStream urlInStream = null;
        if(url.getProtocol().equalsIgnoreCase("http"))
        {
         URLConnection conn = url.openConnection();
         conn.setReadTimeout(getReadTimeout());
         conn.setConnectTimeout(getConnectionTimeout());
         conn.setRequestProperty("Connection", "close"); // if http is being used
     
         urlInStream = conn.getInputStream();
        }
        else
        {
         HttpsURLConnectionImpl urlConnection = (HttpsURLConnectionImpl)url.openConnection();
         urlConnection.setSSLSocketFactory(new HTTPSSocketFactory(kmfactory, trustManagerfactory).getSSLContext().getSocketFactory());
       
         urlConnection.setReadTimeout(getReadTimeout());
         urlConnection.setConnectTimeout(getConnectionTimeout());
         urlConnection.setRequestProperty("Connection", "close"); // if http is being used
            urlInStream = urlConnection.getInputStream();
        }

Thanks,

J