Bash script adding nexus cacert to current java

java-cacert

#!/bin/bash

nexus=nexus.example.net:443
java_home=$( java -XshowSettings:properties -version 2>&1 > /dev/null | grep 'java.home' | sed 's/.*= //' )

echo -n | openssl s_client -connect $nexus |\
    sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/nexus.crt

trap "rm -f /tmp/nexus.crt" 0 2 13 14

keytool -delete -trustcacerts -keystore $java_home/lib/security/cacerts -storepass changeit -noprompt -alias nexuscert
keytool -import -trustcacerts -keystore $java_home/lib/security/cacerts -storepass changeit \
    -noprompt -alias nexuscert -file /tmp/nexus.crt
    
## __END__