cacerts file

[Mark Wielaard]

Hi Marco,

On Sun, 2007-11-11 at 18:52 +0100, Marco Trudel wrote:
> When trying to do some https stuff with GCJ (Linux, rev 122233, shared), 
>   a "cacerts" file can't be found (java.io.FileNotFoundException: 
> foobar\lib\security\cacerts). When using the cacerts file from a Sun JRE 
> 1.6, I get "MalformedKeyringException: incorrect magic".
> 
> So, assuming that I can't just take the one from Sun, where can I get 
> the correct cacerts file? Respectively how to create it?

Yes, Sun supports a, till recently, undocumented keystore format (JKS)
which we cannot read (the code is out there now, so it could in
principle be added). We are using our own keystore format. Since we
don't know which root certificates users wish to trust we leave it up to
the end user/packager for a distro to generate the file. An example of
how to do for Debian GNU/Linux based systems can be found in
classpath/scripts/import-cacerts.sh

Cheers,

Mark