I want to host REST APIs over https. REST web services will be written in java probably using spring framework. These web services will be accessed by java clients (not web browsers), probably using org.apache.http lib. I am not getting clear picture of working with SSL certificates. My questions are - What configurations will be required to host REST web services over "https"? What configurations will be required at client side for accessing these "https" URIs? Do I need to buy trusted SSL certificate for REST server or open java keygen will do? Do I need the same/different certificate copy on REST client too?

REST APIs over https

I want to host REST APIs over https. REST web services will be written in java probably using spring framework.

These web services will be accessed by java clients (not web browsers), probably using org.apache.http lib.

I am not getting clear picture of working with SSL certificates. My questions are -

What configurations will be required to host REST web services over "https"?
What configurations will be required at client side for accessing these "https" URIs?
Do I need to buy trusted SSL certificate for REST server or open java keygen will do?
Do I need the same/different certificate copy on REST client too?