Updating Java Trust Store

[Joseph Lust]

Can anyone explain how you would install necessary SSL certificates in the Java trust store of a Jib image? Given you don't have access to bash and the underlying file system at build time, I'm not certain how this would be achieved.

Thanks.

Joe

[Brian de Alwis]

Hi Joseph.

Basically you should create your own trust store, install it into the container image at build-time with src/main/jib mechanism, and add jvmFlags to configure the JVM to reference your file.  The process is actually very similar that for using a self-signed registry with Jib, except you are configuring your image’s JVM rather than your build-time JVM.

https://github.com/GoogleContainerTools/jib/blob/master/docs/self_sign_cert.md

Alternatively you could overwrite the JVM’s cacerts file.

Hope that helps!

Brian.

--
You received this message because you are subscribed to the Google Groups "Jib users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jib-users+...@googlegroups.com.
To post to this group, send email to jib-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jib-users/2a287fac-cdf8-4ef4-a9b6-feedf947a873%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.