#导出证书
bash
echo | openssl s_client -connect api.idp.ah.cegn:443 2>/dev/null | openssl x509 > api-idp-ah-cegn.crt
// 添加证书 密码:changeit
-importcert = 标准导入证书参数(Java 官方推荐)
-storepass changeit = 直接指定证书库密码,不用手动输入
-noprompt = 不弹询问,直接导入(脚本专用)
jdk1.8
bash
keytool -importcert -alias api-idp-ah-cegn -keystore /opt/jdk/jdk1.8.0_391/jre/lib/security/cacerts -storepass changeit -file api-idp-ah-cegn.crt -noprompt
jdk17
bash
keytool -importcert -alias api-idp-ah-cegn -keystore /opt/jdk/jdk-17.0.2/lib/security/cacerts -storepass changeit -file api-idp-ah-cegn.crt -noprompt
注意:添加证书后需要重启java程序