How to add an intermediate certificate to existing file trusted.certs?

Question

Can someone please help with the below query?

Is there a way to add an intermediate certificate to the file trusted.certs file at C:\Windows\Sun\Java\Deployment via command prompt?

The file trusted.certs is updated whenever a certificate is imported via the java control panel. This is a manual process.

Is there a way to add the trusted intermediate certificate to trusted.certs via a script?

In the picture above, whatever intermediate certificates are in trusted.certs at this location C:\Windows\Sun\Java\Deployment show up under System Trusted Certificates on the java control panel (Security tab->certificates)

For example suppose I have trusted intermediate certificate say C.cert and I would like to add this to trusted.certs file at C:\Windows\Sun\Java\Deployment via a script or a command so that it is displayed under System certificates in the java control panel. How this can be achieved?

Answer 1

Is there a way to add the trusted intermediate certificate to trusted.certs via a script?

You can use key tool to accomplish this. The following command would import test.cer into the certificate store.

keytool -import -keystore cacerts -file -noprompt test.cer

or to the truststore:

keytool -noprompt -importcert -alias mycert -file mycert.cer -keystore truststore

Source:

• https://javarevisited.blogspot.com/2012/03/add-list-certficates-java-keystore.html?m=1

• https://stackoverflow.com/questions/13578134/how-to-automate-keystore-generation-using-the-java-keystore-tool-w-o-user-inter

• https://docs.oracle.com/javase/7/docs/technotes/tools/windows/keytool.html

• https://stackoverflow.com/questions/6340918/trust-store-vs-key-store-creating-with-keytool