How to Import Self-Signed Certificates into the Java Keystore for Universal Trust?

Importing Self-Signed Certificates into Java Keystore for Universal Trust

To establish a default trust for a self-signed certificate in all Java applications, it is necessary to import the certificate into the Java keystore, accessible to all Java programs.

Instructions for Windows

Using Portecle is the most straightforward method:

1. Download and install Portecle.
2. Determine the JRE or JDK used by your program.
3. Copy JAVA_HOMElibsecuritycacerts to a separate location.
4. Open cacerts in Portecle (File > Open Keystore File) with the password "changeit".
5. Import the certificate from the .pem file (Tools > Import Trusted Certificate).
6. Accept the trust path warning and the certificate details.
7. Provide an alias and click "OK".
8. Save the changes by overwriting the original cacerts file.

Instructions for Linux

Alternatively, for Linux systems, follow these steps:

1. Retrieve the SSL certificate from a trusted server using OpenSSL.
2. Verify the certificate information (optional).
3. Import the certificate into the Java keystore using keytool, providing the keystore location, password, alias, and certificate file.

The above is the detailed content of How to Import Self-Signed Certificates into the Java Keystore for Universal Trust?. For more information, please follow other related articles on the PHP Chinese website!