I have an application that should connect to a https webservice.
The webservice offers a zip file containing the following 3 files: *.crt, *.csr, *.key
Question: can I place them into the classpath of the application jar, and then load the cert only on startup (maybe in an own keystore/truststore that is is created on the fly)?
Or do I necessairly have to intall them into the java keystore on each machine, before I can use the my app client?
My preferred way would be to not having install them to the local java keystore, but load them on the fly during application startup.