Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have a single installation of java in a system that runs 2 or 3 applications.
All the applications use the same runtime.
Is there a way to specify a different keystores for the ca certs than the one in java_home/jre/lib/security. That is, is there an option to specify an “extra” keystore that is loaded and added to the certs loaded from java_home/jre/lib/security/cacerts?
What I want to avoid is having to re-import our local ca every time I upgrade the jdk in the box.
I think you want to specify the truststore:
Or if you are using certs through JSSE (you probably are), you can copy your truststore to
jssecacertsin the$JAVA_HOME/jre/lib/security/directory (although you’d still have to do that each time a JDK got installed/reinstalled). Sun’s JSSE looks for$JAVA_HOME/jre/lib/security/jssecacertsbefore$JAVA_HOME/jre/lib/security/cacerts.See http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html#X509TrustManager