Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Newcomers » Newcomers » Where is the correct place to add a trusted certificate on Linux?
Where is the correct place to add a trusted certificate on Linux? [message #1806622] Sun, 12 May 2019 09:39 Go to next message
Mark Raynsford is currently offline Mark RaynsfordFriend
Messages: 7
Registered: June 2014
Junior Member
Hello.

I'm using a local Nexus server to proxy artifacts from Maven Central. I have an organization-wide CA, and the Nexus server is using a certificate from that CA. Eclipse refuses to talk to the server because it doesn't recognize the certificate. For a typical Java program, I would use -Djavax.net.ssl.trustStore=... on the command line to specify a trust store in my home directory that has my CA's certificate in it. Unfortunately, Eclipse seems to ignore this property (tracing Eclipse with strace shows that it never looks at this file). There are no configuration options within Eclipse that I can see that allow for specifying a trust store. I could try to edit eclipse.ini, but that would mean that I would have to edit it every time I update my OS packages (because the updates will wipe out the existing eclipse.ini).

What is the right way to do this?

OS is Arch Linux. Java is OpenJDK 11.
Re: Where is the correct place to add a trusted certificate on Linux? [message #1806625 is a reply to message #1806622] Sun, 12 May 2019 11:29 Go to previous message
Ed Merks is currently offline Ed MerksFriend
Messages: 30452
Registered: July 2009
Senior Member
I'm not sure if the option will do the trick, but if you want to specify VM arguments on the command line to the eclipse executable they need to be at the end and they need to have -vmargs before them:

https://help.eclipse.org/2019-03/index.jsp?topic=%2Forg.eclipse.platform.doc.isv%2Freference%2Fmisc%2Fruntime-options.html

I.e., eclipse -vmargs -Djavax.net.ssl.trustStore=... will pass those arguments to the JVM that the eclipse native executable launches. Without the -vmargs they will be treated as program argument to the Eclipse application (which will generally ignore options it doesn't recognize).

You can of course also put this in your eclipse.ini after the line with -vmargs on it. Updates will not wipe these out.

If you use the installer to create installations, you could put an Eclipse Ini Task in your user.setup so that every new installation you crate automatically has this added to the eclipse.ini.

https://wiki.eclipse.org/Eclipse_Oomph_Authoring
Previous Topic:'Updating Software' has encountered a problem.
Next Topic:How to track down jni errors?
Goto Forum:
  


Current Time: Fri Sep 20 03:47:33 GMT 2019

Powered by FUDForum. Page generated in 0.02981 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top