From 8c78a5b446974b9814a3eeb748659153d1a7bc4c Mon Sep 17 00:00:00 2001 From: =?utf8?q?Felix=20D=C3=B6rre?= Date: Tue, 26 May 2015 15:50:07 +0200 Subject: [PATCH] adding script to generate cacerts.jks from NRE-roots --- config/generateTruststoreNRE.sh | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100755 config/generateTruststoreNRE.sh diff --git a/config/generateTruststoreNRE.sh b/config/generateTruststoreNRE.sh new file mode 100755 index 00000000..77473576 --- /dev/null +++ b/config/generateTruststoreNRE.sh @@ -0,0 +1,26 @@ +#!/bin/bash +# this script imports the cacert root certs + +rm -f cacerts.jks + +function import(){ + keytool -importcert -keystore ../config/cacerts.jks -file "$1.crt" -alias own -storepass "changeit" -alias "$1" $2 +} + +function importP(){ + keytool -importkeystore -srckeystore "$1" -noprompt -destkeystore keystore.pkcs12 -srcstoretype pkcs12 -deststoretype pkcs12 -deststorepass changeit -srcstorepass changeit +} + +import ca/root -noprompt +import ca/assured +import ca/unassured + +for i in ca/{,un}assured_*; do + import ${i%.crt} +done + +for i in keys/*.pkcs12; do + importP $i +done + +keytool -list -keystore ../config/cacerts.jks -storepass "changeit" -- 2.39.2