Questions tagged [cacerts]

78 questions
1
vote
2 answers

Procedure to create a certificate chain recognized by java

tl;dr - get KeyStore Explorer (http://keystore-explorer.org/) and save yourself a world of trouble. p.s. - the keystore alias setting is extremely significant to certain java applications (for example: iDempiere in its Jetty provider ssl…
James B. Byrne
  • 1,048
  • 12
  • 27
1
vote
4 answers

Concatenate certificate lines from 'keytool -list' output

The Java keytool command is used to manage Java keystores. In this case I am listing the contents of the cacerts file that comes with any Java runtime.The command is: keytool -list -keystore ./cacerts -storepass somethingorother The output looks…
1
vote
0 answers

Importing certificate from site using Ansible java_cert

I am pondering the use of the Ansible java_cert module to import certificate from trusted sites. Using bash this can be accomplished using the following echo -n | openssl s_client -connect sh.1.1.1.3.nip.io:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END…
onknows
  • 6,151
  • 12
  • 65
  • 109
0
votes
0 answers

Updating ca-certificates in distroless docker image

How can I run update-ca-certificates (https://manpages.ubuntu.com/manpages/xenial/man8/update-ca-certificates.8.html) while the docker container is running? Meaning updating /etc/ssl/certs while the docker build process and copying the updated certs…
Omri Shneor
  • 965
  • 3
  • 18
  • 34
0
votes
1 answer

OpenDJ Administration Port (4444) not able to authenticate Default User(Directory Manager) /any user

Dears, Could you advise me on below situation, am having an issue with OpenDJ DS after change JVM to OpenJDK seems like the admin-certs has been removed from trusted store in Java could you advise how we can recreate admin connector/certs in OpenDJ…
salim ep
  • 35
  • 5
0
votes
1 answer

confluent kafka python - certificate verification

I used simple producer on Windows, but when I tried it to run on Ubuntu I got: SSL handshake failed: error:0A000086:SSL routines::certificate verify failed: broker certificate could not be verified, verify that ssl.ca.location is correctly…
0
votes
0 answers

Sonarqube / Dockerfile unable to import certificate.pem

Having some difficult time to update the sonarqube from version 9.8 to 9.9.1, the cacerts are located on the correct location for the both versions but for some reason it says during the build (No such file or directory) when building the version…
Lagot
  • 639
  • 1
  • 9
  • 26
0
votes
0 answers

OpenShift add service-ca.crt to cacerts in container

Background I'm building two Springboot applications with Java which I'm deploying on OpenShift in the same namespace using RedHat Universal Base Images. The applications communicate with each other through the Service URL. One of the applications…
0
votes
0 answers

Kubernetes Master Node Cannot be Joined Due to Cluster-Info Configmap: Data Does not Contain Any Valid Certs

A single master cluster cannot be joined by any worker nodes. After creating a token on master and try to join on a worker node using: kubeadm join master:6443 --token pcbl1u.3zh7pjyoa9xsji37 --discovery-token-ca-cert-hash…
Armin
  • 9
  • 2
0
votes
0 answers

Keycloak 21.1 ldaps integration "SHA1 used with certificate"

I have a problem to connect to a ldaps connection. I already added the certificate to the server: I also used the openssl command to verify the url and certificate and I got a successfully response: openssl s_client -connect ip:port -CAfile…
0
votes
1 answer

Java default Certificates missing, even if they are in the correct location and I'm not acutally using any

Any time I run any program that tries to run pure Java code (Coding programs, ENVs and some compiled programs based on it. It does not effect apps that are using Java tho) For example when I try to run Gradle it gives me an…
DeadStar
  • 1
  • 2
0
votes
1 answer

Jenkins Helm container and custom cacerts

Our company injects self-signed SSL certificates. Therefore, we need a custom cacerts file in Java applications to make connections out to the internet. Otherwise, we get certificate authority errors. We are attempting to install Jenkins on our…
John Fisher
  • 137
  • 3
  • 15
0
votes
0 answers

ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)

I have ubuntu server that sends request to a website. When I send request it gives ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131) error. I added that…
Elvin Jafarov
  • 1,341
  • 11
  • 25
0
votes
0 answers

Certificate not appearing on tls-ca-bundle.pem

not a certificate expert but have gone through different resources on the internet but couldn't get this to work, so posting here. I have a cert that I would like to include in /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem OS details: Let's say…
Saugat Mukherjee
  • 778
  • 8
  • 32
0
votes
0 answers

Android Error - C:\Program Files\Android\Android Studio\jre\lib\security\cacerts (The system cannot find the file specified)

I getting this error on a new project that I just created: C:\Program Files\Android\Android Studio\jre\lib\security\cacerts (The system cannot find the file specified) And I don't understand why this is happening with the new project, because I had…
julio segura
  • 63
  • 1
  • 8