Create JKS format trust store to work with the javax.net.ssl.trustSto…

…re property
icatproject-contrib · Aug 7, 2023 · 8cdd5e5 · 8cdd5e5
1 parent 9cd8ac0
commit 8cdd5e5
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/roles/dev_common/tasks/main.yml b/roles/dev_common/tasks/main.yml
@@ -35,6 +35,17 @@
     group: "{{ payara_user }}"
     mode: 0664
 
+# Payara 6+ creates its trust store in PKCS12 format, however the javax.net.ssl.trustStore parameter in ~/.m2/settings.xml only seems to work with JKS format
+- name: "Create JKS-format trust store"
+  command:
+    cmd: keytool -importkeystore -srckeystore /home/{{ payara_user }}/{{ payara_directory }}/glassfish/domains/{{ payara_domain }}/config/cacerts.p12 -destkeystore /home/{{ payara_user }}/{{ payara_directory }}/glassfish/domains/{{ payara_domain }}/config/cacerts.jks -deststoretype jks
+    stdin: |
+      changeit
+      changeit
+      changeit
+  args:
+    creates: /home/{{ payara_user }}/{{ payara_directory }}/glassfish/domains/{{ payara_domain }}/config/cacerts.jks
+
 - name: "Make test ids main folder"
   file:
     path: /home/{{ payara_user }}/test/data/ids/main