java 密钥保存在哪里,哪个是Java应用程序的密钥库/信任库的默认位置？

I am writing an application that uses SSL.

Hence, I have a dummy keystore and a dummy truststore I want to supply to my customer.

Is there any default folder to put them inside my distribution?

e.g. docs, lib, bin...etc. Where is usually the keystore put on the server and where is usually truststore put on the client?

Thanks

解决方案

In Java, according to the JSSE Reference Guide, there is no default for the keystore, the default for the truststore is "jssecacerts, if it exists. Otherwise, cacerts".

A few applications use ~/.keystore as a default keystore, but this is not without problems (mainly because you might not want all the application run by the user to use that trust store).

I'd suggest using application-specific values that you bundle with your application instead, it would tend to be more applicable in general.