Java add certificate to trustStore

add-certificate-to-truststore.sh

# Download ca certificate as .pem or .der
  # [Step only for .pem certificates]
  openssl x509 -outform der -in certificate.pem -out certificate.der
# Import .der certificate into Java trustStore
# "changeit" is the default password for alias
keytool -import -keystore path/to/cacerts -file certificate.der -storepass changeit -alias alias-of-your-certificate
# Verify certificates trusted
keytool -list -keystore path/to/cacerts -storepass changeit

# Force the use of a particular trustStore by your JVM
# Add the following instruction to your JAVA_OPTS
# -Djavax.net.ssl.trustStore=path/to/cacerts