This project is a collection of common utilities for DEMIS Projects, such as:

• load of Keystore/Truststore
• fetch of JWT Token from a remote endpoint
• definition of Proxy configurations
• definition of TLS Context

There's the possibility to deactivate the TLS Hostname Verification when the environment variable ENABLE_HOSTNAME_VERIFICATION is set to false (e.g. for testing purposes), by default the verification is always activated.

Beware:

The Environment variable ENABLE_HOSTNAME_VERIFICATION, when set to true, will cause the set of the following Java Property: jdk.internal.httpclient.disableHostnameVerification to be set to true, disabling then the Hostname Verification for all the HTTP Communications in an application.

See ReleaseNotes for all information regarding the (newest) releases.

If you want to see the security policy, please check our SECURITY.md.

If you want to contribute, please check our CONTRIBUTING.md.

Copyright 2022-2025 gematik GmbH

EUROPEAN UNION PUBLIC LICENCE v. 1.2

EUPL © the European Union 2007, 2016

See the LICENSE.md for the specific language governing permissions and limitations under the License

1. Copyright notice: Each published work result is accompanied by an explicit statement of the license conditions for use. These are regularly typical conditions in connection with open source or free software. Programs described/provided/linked here are free software, unless otherwise stated.
2. Permission notice: Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
   1. The copyright notice (Item 1) and the permission notice (Item 2) shall be included in all copies or substantial portions of the Software.
   2. The software is provided "as is" without warranty of any kind, either express or implied, including, but not limited to, the warranties of fitness for a particular purpose, merchantability, and/or non-infringement. The authors or copyright holders shall not be liable in any manner whatsoever for any damages or other claims arising from, out of or in connection with the software or the use or other dealings with the software, whether in an action of contract, tort, or otherwise.
   3. We take open source license compliance very seriously. We are always striving to achieve compliance at all times and to improve our processes. If you find any issues or have any suggestions or comments, or if you see any other ways in which we can improve, please reach out to: [email protected]
3. Please note: Parts of this code may have been generated using AI-supported technology. Please take this into account, especially when troubleshooting, for security analyses and possible adjustments.

E-Mail to OSPO