Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8295918

Imported certificate in cacerts keystore is removed during recent java update

XMLWordPrintable

      ADDITIONAL SYSTEM INFORMATION :
      Azure Cloud VM
      SUSE Linux Enterprise Server 15 SP2 for SAP
       5.3.18-150200.24.112-default #1 SMP Wed Apr 6 12:31:53 UTC 2022 (faf9825/lp-9f00b5e) x86_64 x86_64 x86_64 GNU/Linux
      glibc-extra-2.26-13.65.1.x86_64
      glibc-2.26-13.65.1.x86_64
      glibc-locale-base-2.26-13.65.1.x86_64
      glibc-i18ndata-2.26-13.65.1.noarch
      glibc-locale-2.26-13.65.1.x86_64

      openjdk version "11.0.16" 2022-07-19
      OpenJDK Runtime Environment (build 11.0.16+8-suse-150000.3.83.1-x8664)
      OpenJDK 64-Bit Server VM (build 11.0.16+8-suse-150000.3.83.1-x8664, mixed mode)


      A DESCRIPTION OF THE PROBLEM :
      we have recently updated our java from java-11-openjdk|11.0.15.0-150000.3.80.1|x86_64 to java-11-openjdk|11.0.16.0-150000.3.83.1|x86_64. After this we found that our certificated imported in cacerts file under /usr/lib64/jvm/java-11-openjdk-11/lib/security/cacerts disappeared because of which our system failed to work and we again had to re-import the certificate.

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Have java version java-11-openjdk|11.0.15.0-150000.3.80.1|x86_64 installed on your system

      Import a certificate to cacerts keystore with below command.

      keytool -import -trustcacerts -alias acdns -file /usr/sap/SSLCerts/Certs/certificatefile.pem -keystore /usr/lib64/jvm/java-11-openjdk-11/lib/security/cacerts

      Update java version to java-11-openjdk|11.0.16.0-150000.3.83.1|x86_64

      check the cacerts file to see if the imported certificate is present.

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      after update it should not remove this manully imported certificate.
      ACTUAL -
      after java update it is removing the manually imported certificate

            Unassigned Unassigned
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: