Manually generate the Java root certificate

|
Programming/ Java
| Programming Java Security

Manually generate the Java root certificate

1
2
3
# dpkg -l | grep ca-certificates
ii  ca-certificates         20161130+nmu1+deb9u1    all     Common CA certificates
ii  ca-certificates-java    20170929~deb9u3         all     Common CA certificates (JKS keystore)

Shell script

1
2
3
4
5
6
7
8
9
storepass='changeit'
JAR=/usr/share/ca-certificates-java/ca-certificates-java.jar

rm -f /etc/ssl/certs/java/cacerts
find /etc/ssl/certs -name \*.pem | \
while read filename; do
    echo "+${filename}"
done | \
java -Xmx64m -jar $JAR -storepass "$storepass"