Downloads an SSL certificate and imports it into a Java keystore.

keytool-import

#!/bin/bash

KT_HOST=${KT_HOST:-$1}
KT_PORT=${KT_PORT:-${2:-443}}
KT_ALIAS=$KT_HOST:$KT_PORT
KT_STORE=${KT_STORE:-$3}

[[ -z $KT_HOST ]] && {
  echo "usage: $(basename $0) host [port] [store]" > /dev/stderr
  exit 1
}

dump_certificate() {
  echo | openssl s_client -showcerts -connect $KT_ALIAS
}

keytool -import -alias $KT_ALIAS -file <(dump_certificate) ${KT_STORE:+-keystore $KT_STORE}