Java: Difference between revisions

Klinger (talk | contribs)
jdk11: alternatives to overriding cacert for jdk11+
 
Line 151: Line 151:
=== jdk11 ===
=== jdk11 ===


JDK11 does not provide the cacert overridable and therefore it is not possible to use the same technique to override the truststore.
JDK11 does not provide the cacert overridable and therefore it is not possible to use the same technique to override the truststore.
 
As an alternative solution you can either set an environment variable, <code>JAVAX_NET_SSL_TRUSTSTORE</code>, or pass an argument to your program, <code>-Djavax.net.ssl.trustStore</code>, with the location of your cacert. See [https://discourse.nixos.org/t/custom-ssl-certificates-for-jdk/18297/9 discussion].


== Building and Packaging ==
== Building and Packaging ==