Extracts all certificates from the mac os certificate store / key chain and imports them into the key chain of your Java installation

macos-certificates-to-java-keystore.sh

#!/bin/bash
#this script should pull all root CAs from the mac os keychain and add them to the jre's keystore
#Comes with absolutely no warranty and all the usual disclaimers

mkdir temp-extract
cd temp-extract

keystore=$JAVA_HOME/jre/lib/security/cacerts
echo "making backup of keystore $keystore to ~/keystore.backup"
set -e -o pipefail
cp $keystore ~/keystore.backup
security find-certificate -a -p | split -p "-----BEGIN CERTIFICATE-----"
set +e
for f in *;
do
  echo "importing cert $f "
  keytool -importcert -noprompt -keystore ${keystore} -storepass changeit -alias $f -file $f;
done