TRIUMF Certificate Authority

Sun (Oracle) Java (Linux):

This procedure adds the TRIUMF CA to Sun (Oracle) Java as used by e.g. the Firefox Java Plugin

  • Download the TRIUMF CA certificate into /etc/pki/tls/certs as per "Other Clients"
  • Locate the Java keystore, typically located in /usr/java/latest/lib/security/cacerts. You can list the default trusted CAs using
    /usr/java/latest/bin/keytool -keystore /usr/java/latest/lib/security/cacerts -list -storepass changeit
  • Add the TRIUMF CA using
    /usr/java/latest/bin/keytool -keystore /usr/java/latest/lib/security/cacerts --importcert -file /etc/pki/tls/certs/triumfca.pem -trustcacerts -storepass changeit -alias TRIUMF (or possibly in /usr/java/latest/jre/lib/security/cacerts)