To resume, in this blog ticket we’ll going to implement the same web application using two different technologies, Spring Boot and Quarkus, such that to compare their respective two essential metrics: RSS (Resident Set Size) and TFR (Time to First Request).
-
-
DEVOPS: Handling X509 certificates and related keys with OpenSSL
In order to expose HTTPS services one needs to provide an X509 certificate signed by a certificate authority (CA). Several trusted CAs are globally available and their public keys are by default configured in browsers. Hence, when the browser talks to linkedin.com, for example, it can check whether the LinkedIn’s certificate isn’t forged by verifying its signature against the associated CA’s configured public key. This way, the browser makes sure it communicates with the right service.
The operations required to create, store and convert X509 keys and certificates are not only quite complex but also repetitive, hence this memento of how to do it.