summaryrefslogtreecommitdiffstats
path: root/conf/CA
diff options
context:
space:
mode:
Diffstat (limited to 'conf/CA')
-rw-r--r--conf/CA/truststore.sh5
1 files changed, 4 insertions, 1 deletions
diff --git a/conf/CA/truststore.sh b/conf/CA/truststore.sh
index 399048cb..0414c486 100644
--- a/conf/CA/truststore.sh
+++ b/conf/CA/truststore.sh
@@ -1,2 +1,5 @@
+
echo "FYI, by convention, truststore passwords are 'changeit', but you may add something more sophisticated"
-openssl pkcs12 -export -name AAF_Root_CA -in certs/ca.crt -nokeys -out truststore.p12
+# PCKS12 does not appear to be able to mark CAs as Trusted
+# openssl pkcs12 -export -name AAF_Root_CA -in certs/ca.crt -nokeys -out truststore.p12
+keytool -importcert -file certs/ca.crt -trustcacerts -alias AAF_ROOT_CA -keystore truststore.jks