Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What certificates are trusted in truststore?

I do not know very well keystore / truststore lingo but as far as I'm concerned, a truststore keeps the certificates trusted by a peer server.

I can view the content of a keystore using

keytool -list -keystore refArchive/testkeystore Enter keystore password: password  

Is there any equivalent for the truststore? How can I view the trusted certificates?

thx!

like image 811
code-gijoe Avatar asked Feb 08 '12 21:02

code-gijoe


People also ask

How do you know which truststore to use?

To determine what SSL/TLS keystore and truststore a Java™ application is using, you can set the JVM property javax. net. debug=true and re-create the error.

Is JKS a truststore?

Truststore file, cacerts. jks, contains the Application Server's trusted certificates, including public keys for other entities. For a trusted certificate, the server has confirmed that the public key in the certificate belongs to the certificate's owner.

Is cacerts a truststore?

'cacerts' is a truststore. A trust store is used to authenticate peers. A keystore is used to authenticate yourself.


1 Answers

Trust store generally (actually should only contain root CAs but this rule is violated in general) contains the certificates that of the root CAs (public CAs or private CAs). You can verify the list of certs in trust store using

keytool -list -v -keystore truststore.jks 
like image 51
Aravind Yarram Avatar answered Sep 30 '22 11:09

Aravind Yarram