OpenSSL install root certificates
System
Simply copy the certificate to /etc/ssl/certs
Java
The public key certificates need to be in DER format (not PEM). Use openssl to convert the ca certificate if necessary:
$ openssl x509 -in my-ca.crt -inform pem -out my-ca.der -outform der
Import the certificate
# keytool -importcert -alias local-CA \ -keystore /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/security/cacerts \ -file my-ca.der
The password for the cacerts keystore is changeit
.
Backlinks: