java trust unix certificate store

Question

I have added a crt to /etc/pki/ca-trust/source/anchors so the server certificate can trusted by ssl clients. So, for example, when I curl https://<server> the certificate is trusted automatically.

Is there any way to make a java application to trust the certificates installed on the system?

Is the only way to make it works in java adding the certificate to the jvm truststore?

Regards

Answer 1

I don't know any out of the box solutions for that. I think there're multiple ways to reach your goal:

1. Write a class to sync you defined trust store and the cert directory
2. Write an own TrustManager implementation which is based on the cert directory