The Open Bank Project Hola Application can be used to demonstrate and test the Open Banking OAuth2 and consent creation and usage via OBP API and Ory Hydra. It supports both UK and Berlin Group styles. Hola is written in Java / Spring Boot.

Works in conjunction with the OBP Hydra Identity Provider You might find additional install instructions here

Can be driven automatically (for test purposes) using OBP Selenium

Suppose the OBP-API server domain is: api-mtls.ofpilot.com

Suppose the Hydra server domain is: oauth2.api-mtls.ofpilot.com

• check server side certificate

  openssl s_client -showcerts -connect api-mtls.ofpilot.com:443

  openssl s_client -showcerts -connect oauth2.api-mtls.ofpilot.com:443

• save the OBP-API server certificate to file ofpilot.cer, save Hydra server certificate to file hydra.cer

  openssl s_client -servername api-mtls.ofpilot.com -connect api-mtls.ofpilot.com:443 </dev/null 2>/dev/null | openssl x509 -inform PEM -outform DER -out ofpilot.cer

  openssl s_client -servername oauth2.api-mtls.ofpilot.com -connect oauth2.api-mtls.ofpilot.com:443 </dev/null 2>/dev/null | openssl x509 -inform PEM -outform DER -out hydra.cer

• import ofpilot.cer and hydra.cer to truststore file ofpilot.jks, and put it in resources/cert folder

  keytool -import -alias ofpilot -keystore ofpilot.jks -file ofpilot.cer

  keytool -import -alias hydra -keystore ofpilot.jks -file hydra.cer

• Generate user.key and user.pem files and convert them to cert.p12.

  openssl pkcs12 -export -in user.pem -inkey user.key -certfile user.pem -out user.p12

• convert cert.p12 to file user.jks

  keytool -importkeystore -srckeystore user.p12 -srcstoretype pkcs12 -destkeystore user.jks

## keystore and truststore files can be local files or web resources, as example:
mtls.keyStore.path=file:///Users/<some path>/cert/user.jks
#mtls.keyStore.path=http://<some domain>/user.jks
mtls.keyStore.password=<keystore password>
mtls.trustStore.path=file:///Users/<some path>/cert/ofpilot.jks
#mtls.trustStore.path=http://<some domain>/ofpilot.jks
mtls.trustStore.password=<truststore password>

Copyright TESOBE GmbH 2020