RHEL & Ubuntu & JDK Install Root Certificates

 

 

Ubuntu:

1. apt install ca-certificates
   
   mkdir -pv /usr/share/ca-certificates/quasi

    

2. cp ca.crt /usr/share/ca-certificates/quasi/quasi.crt
   
   echo quasi/quasi.crt >> /etc/ca-certificates.conf
   
   update-ca-certificates --verbose --fresh

   
   /etc/ssl/certs 下会生成链接到 /usr/share/ca-certificates/quasi/quasi.crt
   
   

    

    

 

RHEL:

1. cp quasi.crt /etc/pki/ca-trust/source/anchors/quasi.crt
   
   OR
   
   cp quasi.crt /usr/share/pki/ca-trust-source/anchors/quasi.crt
   
   update-ca-trust

2.  README
   

   

3. CHANGED FILES
   

    每个箭头标注的文件都包含了添加的quasi.crt
   
   

   

   

 

 

JDK:

1. 路径
   

    

   

   

    

     

2. 列出keystore的cacerts
   

   keytool -list -v -cacerts -storepass changeit

    

3. 添加cacert
   

   keytool -importcert -alias Elasticsearch -cacerts -trustcacerts  -noprompt -storepass changeit -file .\quasi.crt -v

    

4. 查看添加的cacert
   

   keytool -list -alias Elasticsearch -cacerts -storepass changeit -v

    

   

    

5. 删除cacert

   keytool -delete -alias Elasticsearch -cacerts -storepass changeit -v