Questions tagged [cacerts]
78 questions
1
vote
2 answers
Procedure to create a certificate chain recognized by java
tl;dr - get KeyStore Explorer (http://keystore-explorer.org/) and save yourself a world of trouble.
p.s. - the keystore alias setting is extremely significant to certain java applications (for example: iDempiere in its Jetty provider ssl…

James B. Byrne
- 1,048
- 12
- 27
1
vote
4 answers
Concatenate certificate lines from 'keytool -list' output
The Java keytool command is used to manage Java keystores. In this case I am listing the contents of the cacerts file that comes with any Java runtime.The command is:
keytool -list -keystore ./cacerts -storepass somethingorother
The output looks…

Scot Harkins
- 11
- 2
1
vote
0 answers
Importing certificate from site using Ansible java_cert
I am pondering the use of the Ansible java_cert module to import certificate from trusted sites.
Using bash this can be accomplished using the following
echo -n | openssl s_client -connect sh.1.1.1.3.nip.io:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END…

onknows
- 6,151
- 12
- 65
- 109
0
votes
0 answers
Updating ca-certificates in distroless docker image
How can I run update-ca-certificates
(https://manpages.ubuntu.com/manpages/xenial/man8/update-ca-certificates.8.html) while the docker container is running? Meaning updating /etc/ssl/certs while the docker build process and copying the updated certs…

Omri Shneor
- 965
- 3
- 18
- 34
0
votes
1 answer
OpenDJ Administration Port (4444) not able to authenticate Default User(Directory Manager) /any user
Dears,
Could you advise me on below situation, am having an issue with OpenDJ DS after change JVM to OpenJDK
seems like the admin-certs has been removed from trusted store in Java
could you advise how we can recreate admin connector/certs in OpenDJ…

salim ep
- 35
- 5
0
votes
1 answer
confluent kafka python - certificate verification
I used simple producer on Windows, but when I tried it to run on Ubuntu I got:
SSL handshake failed: error:0A000086:SSL routines::certificate verify failed: broker certificate could not be verified, verify that ssl.ca.location is correctly…

Killen
- 21
- 3
0
votes
0 answers
Sonarqube / Dockerfile unable to import certificate.pem
Having some difficult time to update the sonarqube from version 9.8 to 9.9.1, the cacerts are located on the correct location for the both versions but for some reason it says during the build (No such file or directory) when building the version…

Lagot
- 639
- 1
- 9
- 26
0
votes
0 answers
OpenShift add service-ca.crt to cacerts in container
Background
I'm building two Springboot applications with Java which I'm deploying on OpenShift in the same namespace using RedHat Universal Base Images. The applications communicate with each other through the Service URL. One of the applications…

hakktastic
- 1
- 2
0
votes
0 answers
Kubernetes Master Node Cannot be Joined Due to Cluster-Info Configmap: Data Does not Contain Any Valid Certs
A single master cluster cannot be joined by any worker nodes. After creating a token on master and try to join on a worker node using:
kubeadm join master:6443 --token pcbl1u.3zh7pjyoa9xsji37 --discovery-token-ca-cert-hash…

Armin
- 9
- 2
0
votes
0 answers
Keycloak 21.1 ldaps integration "SHA1 used with certificate"
I have a problem to connect to a ldaps connection. I already added the certificate to the server:
I also used the openssl command to verify the url and certificate and I got a successfully response:
openssl s_client -connect ip:port -CAfile…

user1756902
- 33
- 2
0
votes
1 answer
Java default Certificates missing, even if they are in the correct location and I'm not acutally using any
Any time I run any program that tries to run pure Java code (Coding programs, ENVs and some compiled programs based on it. It does not effect apps that are using Java tho)
For example when I try to run Gradle it gives me an…

DeadStar
- 1
- 2
0
votes
1 answer
Jenkins Helm container and custom cacerts
Our company injects self-signed SSL certificates. Therefore, we need a custom cacerts file in Java applications to make connections out to the internet. Otherwise, we get certificate authority errors.
We are attempting to install Jenkins on our…

John Fisher
- 137
- 3
- 15
0
votes
0 answers
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)
I have ubuntu server that sends request to a website. When I send request it gives
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED]
certificate verify failed: unable to get local issuer certificate
(_ssl.c:1131)
error.
I added that…

Elvin Jafarov
- 1,341
- 11
- 25
0
votes
0 answers
Certificate not appearing on tls-ca-bundle.pem
not a certificate expert but have gone through different resources on the internet but couldn't get this to work, so posting here.
I have a cert that I would like to include in /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
OS details:
Let's say…

Saugat Mukherjee
- 778
- 8
- 32
0
votes
0 answers
Android Error - C:\Program Files\Android\Android Studio\jre\lib\security\cacerts (The system cannot find the file specified)
I getting this error on a new project that I just created:
C:\Program Files\Android\Android Studio\jre\lib\security\cacerts (The system cannot find the file specified)
And I don't understand why this is happening with the new project, because I had…

julio segura
- 63
- 1
- 8