Description Andy Brook 2006-07-10 12:39:35 EDT

I seem to have to import SSL keys into my Eclipse runtime cacerts file in order for java to allow a SSL socket connection to a SSL secured Jira server.  I have this second hand as the recommended way of doing things, I have a better way Id like to suggest, having had to do this very thing in a plugin project.

This all works by pointing some environment variables to a manufactured keystore kept in the plugins state path:
			System.getProperties().setProperty("javax.net.ssl.trustStore", af.getAbsolutePath()); //must be a resolvable FILE
			System.getProperties().setProperty("javax.net.ssl.trustStorePassword", "changeit");


First you need to get the cert from the server, then you need to import it into a keystore and use it.  Ignoring how you get the cert in the first place, the attachment shows some cut and pasted methods that put the cert into a keystore in the plugines state location, update an environment variable and bobs your uncle without any JRE cacert tweaks.

I glossed over the question of how to extract the cert, I havent had to do this for my need and havent thought about it a great deal.  I guess you could use 'openssl s_client -connect theserver:443' and chop the cert out of the stream, but obv, this is native 'linux' and not java.  Maybe someone can figure this out...


comments?