Add custom SSL certificate to trust store, but keep default Cacerts in Java 8+?

Is there a way in Java to specify additional truststore (s), but java is the default for cacerts if the corresponding certificate is not found in the specified trust stores? I am looking to create a trusted store with some basic certificates that I need in several applications, but without the need to update the cacerts file for each individual file.

I understand that I can simply expand the cacerts file (i.e. copy it and add to it), but I would prefer to have a central proxy with only my additional certificates.

I found this question already asked , but I'm already several years old, and I don’t know if Java 7, 8 or 9 solved this problem differently, because.

All the documentation I found indicates use javax.net.ssl.trustStoreand pointing it to my new trust store, but this will ignore everything in my cacerts.

If I point to my keystore with javax.net.ssl.keyStore, then I cannot have a keystore for the application.

Ideally, I would like to be able to create a proxy list for java for iteration.

Does this exist in Java 7+?

+4
source share

Source: https://habr.com/ru/post/1675555/


All Articles