UBI system CA certificates not loaded

Open
#533 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
25/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Stale
Tech stack
java, linux, shell
Domain
devops, security

Research direction

Inspect features.sh and how it invokes the java binary; compare its trust-store behavior with /etc/pki/ca-trust/extracted/java/cacerts on a UBI image. Confirm the behavior with an on-premise Maven repository using a company-signed certificate, and document or test the result.

Written by the indexing model from the issue text.

Description

We want to use an on-premise maven repository to install features instead of using the public one. It has a company signed cert so we need to establish trust with it by importing the company CA.

Is there a way to load /etc/pki/ca-trust/extracted/java/cacerts to use in features.sh?
The script seems to call the java binary directly so I expected it to work out of the box on an UBI image.
I think the Red Hat build of OpenJDK does load it by default which is why I originally opened an issue in the Semeru Runtimes Github but I'm not getting any response there.

Dominant language
Shell
Stars
48
Forks
60
Avg merge
3h 2m
Merged PRs (30d)
3

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from OpenLiberty/ci.docker

All issues in OpenLiberty/ci.docker

Similar issues

More Shell/Bash issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.