6.3 Modifying SSL Certificates

Oracle JRockit Virtual Edition enables you to modify the cacerts certificates file, which represents a system-wide keystore with certificate authority (CA) certificates. The file is located in the /jrockitve/jrockit/jre/lib/security directory in the file system of the virtual machine image.

To add or remove SSL certificates, shut down the virtual machine, and then perform the following steps:

1. Copy the cacerts file from the file system of the virtual machine to a local directory by running the following Image Tool command:

   java -jar jrockitve-imagetool.jar -f vm_cfg get /jrockitve/jrockit/jre/lib/security/cacerts tmp/cacerts
   

   In this command, vm_cfg represents the path and name of the virtual machine image file (vm.cfg) and tmp represents the path of the directory in the local file system in which the cacerts file should be copied.

2. Modify the cacerts file as required by using the keytool utility.

3. Copy the modified cacerts file from the local directory to the file system of the virtual machine by running the following Image Tool command:

   java -jar jrockitve-imagetool.jar -f vm_cfg put tmp/cacerts /jrockitve/jrockit/jre/lib/security/cacerts
   

   In this command, vm_cfg represents the path and name of the virtual machine image file (vm.cfg) and tmp represents the path of the directory in the local file system in which the modified cacerts file is located.

For more information about the get and put operations of the -f (--file) command-line option of the Image Tool, see Appendix A, "Image Tool Command-Line Option Reference."