Skip to content

Commit

Permalink
Add documentation for custom CA certificates
Browse files Browse the repository at this point in the history
Will be available after adoptium/containers#392 is merged.
  • Loading branch information
rassie committed Aug 10, 2023
1 parent dbdc7a9 commit 00ef926
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions eclipse-temurin/content.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,16 @@ The Eclipse Temurin project provides code and processes that support the buildin

JRE images are available for all versions of Eclipse Temurin but it is recommended that you produce a custom JRE-like runtime using `jlink` (see usage below).

# Can I add my internal CA certificates to the truststore?

Yes! Add your certificates to `/certificates` inside the container (e.g. by using a volume) and set the environment variable `USE_SYSTEM_CA_CERTS` on the container to any value. With Docker CLI this might look like this:

```console
$ docker run -v $(pwd)/certs:/certificates/ -e USE_SYSTEM_CA_CERTS=1 %%IMAGE%%:11
```

The certificates would get added to the system CA store, which would in turn be converted to Java's truststore. The format of the certificates depends on what the OS of the base image used expects, but PEM format with a `.crt` file extension is a good bet. **Please note**: this feature is currently not available for Windows-based images.

# How to use this Image

To run a pre-built jar file with the latest OpenJDK 11, use the following Dockerfile:
Expand Down

0 comments on commit 00ef926

Please sign in to comment.