Skip to content
This repository has been archived by the owner on Apr 4, 2022. It is now read-only.

Allow Import of Certificates Into Truststore on Container Startup #68

Open
DiCanio opened this issue Dec 8, 2021 · 0 comments
Open
Assignees
Labels
operation For things related to Build, CI or dependencies

Comments

@DiCanio
Copy link
Member

DiCanio commented Dec 8, 2021

We need to be able to import 3rd party certificates into the Java trust store on container startup. This is necessary since we are using certificates during deployment that are issued by DFN. Their intermediate and root CA certificates have to be within the trust store which they are not by default. Otherwise we cannot use our certificates since the trust chain is incomplete.

Proposed Solution:

  • define a directory to load 3rd party certificates into
  • have a start script looking for files within this directory
  • load certificates from the directory into the trust store using Java's keytool
@DiCanio DiCanio added the operation For things related to Build, CI or dependencies label Dec 8, 2021
@DiCanio DiCanio self-assigned this Dec 8, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
operation For things related to Build, CI or dependencies
Projects
None yet
Development

No branches or pull requests

1 participant