Is this really a project requirement?
why bad solution?
xml in the most simple editor on your PC?
Is “postconstruct” something in java like this?
Have you even failed with easy questions (the first ones)?

Is “postconstruct” something in java like this?
I’d recommend the same as @martin_angelo did, working with certificates adds an unnecessary complexity when a user account system would solve your problem. Is this really a project requirement?
I definitely strongly recommend to use a user account system. With user name and password and additionally a user certificate for authentication.
The certificate should be uploaded by the user everytime during log-in.
The certificate should be deleted when the session is expired.
The tax payer need to login with email an password an need to upload an encryption certificate to decrypt and encrypt his/her data.
After log off or session is expired the user has to login and upload the certificate again.
why bad solution? because i only controlling who access app with certificate.
good solution is controlling who decrypt data with certificate .
I’m trying to set up a Java web service running in Tomcat 7 to use mutual (2-way) authentication. It seems like no matter what I do, connecting to the service on the secure port isn’t working.
He…
The second question was about a web api request and json handling. Unfortunately I wasted a lot if time trying to make a json lib working. Finally I found out, which libs are allowed, but then I didn’t have any more time. And last was some SQL task, but I didn’t start it. In total I had 70 minutes. I think the first challenge was intermediate/advanced, the second one was intermediate. The third one was maybe easy, but I didn’t take a look. I only had 1 minute left….
(if it’s the same, the file is corrupted. If not, there is something wrong with eclipse.)
The second question was about a web api request and json handling. Unfortunately I wasted a lot if time trying to make a json lib working. Finally I found out, which libs are allowed, but then I didn’t have any more time. And last was some SQL task, but I didn’t start it. In total I had 70 minutes. I think the first challenge was intermediate/advanced, the second one was intermediate. The third one was maybe easy, but I didn’t take a look. I only had 1 minute left….
Update: My feelings about the complexity and the time limits where right. I was very furious yesterday and wrote a polite email, explaining my point of view where I also expressed my opinion about disadvantages of using such a platform (e.g. the tasks are not realistic Szenarios, no professional developer works without an IDE nowadays, no professional developer debugs with System.out.println, …).
Friday morning, I received an email, where the HR said the engineering team agrees with me and will come back at me in the beginning of next week. After 4 hours I received another email where I got invited to the next interview.