infra:openssl_root_certificates

OpenSSL install root certificates

Simply copy the certificate to /etc/ssl/certs

The public key certificates need to be in DER format (not PEM). Use openssl to convert the ca certificate if necessary:

$ openssl x509 -in my-ca.crt -inform pem -out my-ca.der -outform der

Import the certificate

# keytool -importcert -alias local-CA \
    -keystore /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/security/cacerts \
    -file my-ca.der

The password for the cacerts keystore is changeit.

  • infra/openssl_root_certificates.txt
  • Last modified: 20/11/2021 01:57
  • by harm