Skip to content

Commit 00ef926

Browse files
committed
Add documentation for custom CA certificates
Will be available after adoptium/containers#392 is merged.
1 parent dbdc7a9 commit 00ef926

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

eclipse-temurin/content.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,16 @@ The Eclipse Temurin project provides code and processes that support the buildin
1212

1313
JRE images are available for all versions of Eclipse Temurin but it is recommended that you produce a custom JRE-like runtime using `jlink` (see usage below).
1414

15+
# Can I add my internal CA certificates to the truststore?
16+
17+
Yes! Add your certificates to `/certificates` inside the container (e.g. by using a volume) and set the environment variable `USE_SYSTEM_CA_CERTS` on the container to any value. With Docker CLI this might look like this:
18+
19+
```console
20+
$ docker run -v $(pwd)/certs:/certificates/ -e USE_SYSTEM_CA_CERTS=1 %%IMAGE%%:11
21+
```
22+
23+
The certificates would get added to the system CA store, which would in turn be converted to Java's truststore. The format of the certificates depends on what the OS of the base image used expects, but PEM format with a `.crt` file extension is a good bet. **Please note**: this feature is currently not available for Windows-based images.
24+
1525
# How to use this Image
1626

1727
To run a pre-built jar file with the latest OpenJDK 11, use the following Dockerfile:

0 commit comments

Comments
 (0)