This is the mail archive of the
java@gcc.gnu.org
mailing list for the Java project.
Re: cacerts file
- From: Mark Wielaard <mark at klomp dot org>
- To: Marco Trudel <marco at mtsystems dot ch>
- Cc: java at gcc dot gnu dot org
- Date: Tue, 13 Nov 2007 12:07:09 +0100
- Subject: Re: cacerts file
- References: <47374140.3030401@mtsystems.ch>
Hi Marco,
On Sun, 2007-11-11 at 18:52 +0100, Marco Trudel wrote:
> When trying to do some https stuff with GCJ (Linux, rev 122233, shared),
> a "cacerts" file can't be found (java.io.FileNotFoundException:
> foobar\lib\security\cacerts). When using the cacerts file from a Sun JRE
> 1.6, I get "MalformedKeyringException: incorrect magic".
>
> So, assuming that I can't just take the one from Sun, where can I get
> the correct cacerts file? Respectively how to create it?
Yes, Sun supports a, till recently, undocumented keystore format (JKS)
which we cannot read (the code is out there now, so it could in
principle be added). We are using our own keystore format. Since we
don't know which root certificates users wish to trust we leave it up to
the end user/packager for a distro to generate the file. An example of
how to do for Debian GNU/Linux based systems can be found in
classpath/scripts/import-cacerts.sh
Cheers,
Mark