OZG-3322 build key store like in zufi

user-manager-server/src/main/java/de/itvsh/kop/user/MongodbCertificateLoader.java

@@ -8,7 +8,9 @@ import java.nio.file.Paths;
 import java.security.KeyStore;
 import java.security.KeyStoreException;
 import java.security.NoSuchAlgorithmException;
+import java.security.cert.Certificate;
 import java.security.cert.CertificateException;
+import java.security.cert.CertificateFactory;
 
 import javax.enterprise.context.ApplicationScoped;
 import javax.enterprise.event.Observes;
@@ -27,15 +29,44 @@ class MongodbCertificateLoader {
 
 	void onStart(@Observes StartupEvent ev) throws KeyStoreException, CertificateException, IOException, NoSuchAlgorithmException {
 		if(Files.exists(Paths.get(mongoDbCaCert))) {
+			buildKeyStore();
 			System.out.println("loading cert...");
-			KeyStore keystore = KeyStore.getInstance("pkcs12");
-			keystore.load(loadCaCrt(), null);
+//			KeyStore keystore = KeyStore.getInstance("pkcs12");
+//			keystore.load(loadCaCrt(), null);
 			System.out.println("cert loaded");
 		} else {
 			System.out.println("cert file does not exists");
 		}
 	}
 
+	KeyStore buildKeyStore() {
+		try {
+			var trustStore = initKeyStore();
+			trustStore.setCertificateEntry("ca", generateCertificate());
+			return trustStore;
+		} catch (Exception e) {
+			throw new TechnicalException("Error building KeyStore", e);
+		}
+	}
+
+	KeyStore initKeyStore() {
+		try {
+			var trustStore = KeyStore.getInstance("pkcs12");
+			trustStore.load(null, null);
+			return trustStore;
+		} catch (Exception e) {
+			throw new TechnicalException("Error init KeyStore", e);
+		}
+	}
+
+	Certificate generateCertificate() {
+		try {
+			return CertificateFactory.getInstance("X.509").generateCertificate(loadCaCrt());
+		} catch (Exception e) {
+			throw new TechnicalException("Error generating Certificate", e);
+		}
+	}
+
 	InputStream loadCaCrt() {
 		try {
 			return Files.newInputStream(Paths.get(mongoDbCaCert));