[HAPI-devel] Encryption Advice and Example

[Zoran A. <zo...@sp...>]

Hi Guys,

 

By way of background, this is our first HL7 or HAPI project and we are successfully exchanging HL7 messages without encryption, HAPI is proving to be a great library. We can receive and send messages without issue. We now have to implement encryption.

 

I am hoping you may be able to help with an issue I am having setting up TLS encryption for sending and receiving HL7 messages using HAPI 2.3.

 

We have been provided a public key for encrypting messages we send. I added the key to our keystore which I can see we need to load using a CustomCertificateTlsSocketFactory, but how do I specify the key in the keystore to use for encrypting outgoing messages? Do we just setup the keystore with a single key which gets used by default?

 

Similarly for incoming messages, we have supplied our public key, but I can’t see where in the CustomCertificateTlsSocketFactory we point to the our keypair or alias and specify the keypair password? Do we extract the private key into a dedicated keystore?

 

I would really appreciate any help you guys may have with this as this is quite new to us.

 

TIA

Zoran