blocks|key|499800|text|从OS+X+10.10.1+(Yosemite)开始，cacerts文件的位置已更改为|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|499801|$(/usr/libexec/java_home)/jre/lib/security/cacerts|code-block|syntax|javascript|499802|entityMap^0|R|7|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

As of OS X 10.10.1 (Yosemite), the location of the <code>cacerts</code> file has been changed to

<pre><code>$(/usr/libexec/java_home)/jre/lib/security/cacerts
</code></pre>

blocks|key|283145|text|你也可以参考readlink+-f+"which+java“。然而，它可能并不适用于所有的二进制包装器。实际上，启动一个Java类可能更好。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|283146|entityMap^0|J|A|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

You can also consult readlink -f "<code>which java</code>". However it might not work for all binary wrappers. It is most likely better to actually start a Java class.

blocks|key|499944|text|如果您需要以编程方式访问这些证书，最好根本不使用该文件，而是通过信任管理器访问它。以下代码来自OpenJDK+Test案例(确保构建的cacerts集合不为空)：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|499945|TrustManagerFactory+trustManagerFactory+=
++++TrustManagerFactory.getInstance("PKIX");
trustManagerFactory.init((KeyStore)+null);
TrustManager[]+trustManagers+=
++++trustManagerFactory.getTrustManagers();
X509TrustManager+trustManager+=
++++(X509TrustManager)+trustManagers[0];
X509Certificate[]+acceptedIssuers+=
++++trustManager.getAcceptedIssuers();|code-block|syntax|javascript|499946|因此您不必处理文件位置或密钥库密码。|499947|entityMap|0|LINK|mutability|MUTABLE|url|http://cr.openjdk.java.net/~martin/webrevs/jdk/CacertsExplorer/test/jdk/javax/net/ssl/sanity/CacertsExplorer.java.html^0|1J|4|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|C|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

If you need to access those certs programmatically it is best to not use the file at all, but access it via the trust manager. The following code is from a OpenJDK <a href="http://cr.openjdk.java.net/~martin/webrevs/jdk/CacertsExplorer/test/jdk/javax/net/ssl/sanity/CacertsExplorer.java.html" rel="noreferrer">Test</a> case (which makes sure the built cacerts collection is not empty):

<pre><code>TrustManagerFactory trustManagerFactory =
 TrustManagerFactory.getInstance("PKIX");
trustManagerFactory.init((KeyStore) null);
TrustManager[] trustManagers =
 trustManagerFactory.getTrustManagers();
X509TrustManager trustManager =
 (X509TrustManager) trustManagers[0];
X509Certificate[] acceptedIssuers =
 trustManager.getAcceptedIssuers();
</code></pre>

So you don’t have to deal with file location or keystore password.

blocks|key|500020|text|在MacOS+Mojave中，位置是：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|500021|/Library/Java/JavaVirtualMachines/jdk1.8.0_192.jdk/Contents/Home/jre/lib/security/cacerts+|code-block|syntax|javascript|500022|如果使用sdkman管理java版本，则cacerts位于|500023|~/.sdkman/candidates/java/current/jre/lib/security|500024|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

In MacOS Mojave, the location is:

<pre><code>/Library/Java/JavaVirtualMachines/jdk1.8.0_192.jdk/Contents/Home/jre/lib/security/cacerts 
</code></pre>

If using sdkman to manage java versions, the cacerts is in

<pre><code>~/.sdkman/candidates/java/current/jre/lib/security
</code></pre>

I am looking on how how to obtain the location of <code>cacerts</code> of the default java installation, when you do not have <code>JAVA_HOME</code> or <code>JRE_HOME</code> defined.

I need a solution that works at least for <code>OS X</code> and <code>Linux</code>.

Yes. <code>java -v</code> is assumed to work :)

How to obtain the location of cacerts of the default java installation?

Linux

MacOS

Java

我正在研究如何在您没有定义JAVA_HOME或JRE_HOME的情况下获得默认java安装的cacerts的位置。我需要一个至少适用于OS X和Linux的解决方案。是。假设java -v可以工作:)

问如何获取默认java安装的cacerts位置？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何获取默认java安装的cacerts位置？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何获取默认java安装的cacerts位置？
EN