<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); --darkreader-inline-color:#e8e7e3;" data-darkreader-inline-color="">
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif">
Hi,</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif">
<br>
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif">
We were trying to simplify the certificate and SSL configuration during our java app deployment in Windows. As part of this, we were trying to pull certificates from Windows-ROOT or Windows-MY by setting
</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif;mso-layout-grid-align:none;text-autospace:none">
<span style="font-size: 10pt; font-family: Consolas; color: rgb(217, 232, 247); --darkreader-inline-color:#d9eaf7;" data-darkreader-inline-color=""><span style="mso-spacerun:yes">
</span><span style="mso-tab-count:1"></span></span><span style="font-size: 10pt; font-family: Consolas; color: rgb(18, 144, 195); --darkreader-inline-color:#62c7f0;" data-darkreader-inline-color="">System</span><span style="font-size: 10pt; font-family: Consolas; color: lavender; --darkreader-inline-color:#e6edfa;" data-darkreader-inline-color="">.</span><i><span style="font-size: 10pt; font-family: Consolas; color: rgb(150, 236, 63); --darkreader-inline-color:#9eed4e;" data-darkreader-inline-color="">setProperty</span></i><span style="font-size: 10pt; font-family: Consolas; color: rgb(249, 250, 244); --darkreader-inline-color:#f9faf4;" data-darkreader-inline-color="">(</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(23, 198, 163); --darkreader-inline-color:#63edd1;" data-darkreader-inline-color="">"javax.net.ssl.trustStoreType"</span><span style="font-size: 10pt; font-family: Consolas; color: lavender; --darkreader-inline-color:#e6edfa;" data-darkreader-inline-color="">,</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(23, 198, 163); --darkreader-inline-color:#63edd1;" data-darkreader-inline-color="">"Windows-ROOT"</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(249, 250, 244); --darkreader-inline-color:#f9faf4;" data-darkreader-inline-color="">)</span><span style="font-size: 10pt; font-family: Consolas; color: lavender; --darkreader-inline-color:#e6edfa;" data-darkreader-inline-color="">;</span><span style="font-size:
10.0pt;font-family:Consolas;mso-bidi-font-family:Consolas"></span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif">
<span style="font-size: 10pt; font-family: Consolas; color: rgb(217, 232, 247); --darkreader-inline-color:#d9eaf7;" data-darkreader-inline-color=""><span style="mso-spacerun:yes">
</span><span style="mso-spacerun:yes"> </span></span><span style="font-size: 10pt; font-family: Consolas; color: rgb(18, 144, 195); --darkreader-inline-color:#62c7f0;" data-darkreader-inline-color="">System</span><span style="font-size: 10pt; font-family: Consolas; color: lavender; --darkreader-inline-color:#e6edfa;" data-darkreader-inline-color="">.</span><i><span style="font-size: 10pt; font-family: Consolas; color: rgb(150, 236, 63); --darkreader-inline-color:#9eed4e;" data-darkreader-inline-color="">setProperty</span></i><span style="font-size: 10pt; font-family: Consolas; color: rgb(249, 250, 244); --darkreader-inline-color:#f9faf4;" data-darkreader-inline-color="">(</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(23, 198, 163); --darkreader-inline-color:#63edd1;" data-darkreader-inline-color="">"javax.net.ssl.trustStore"</span><span style="font-size: 10pt; font-family: Consolas; color: lavender; --darkreader-inline-color:#e6edfa;" data-darkreader-inline-color="">,</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(217, 232, 247); --darkreader-inline-color:#d9eaf7;" data-darkreader-inline-color="">
</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(23, 198, 163); --darkreader-inline-color:#63edd1;" data-darkreader-inline-color="">"NUL"</span><span style="font-size: 10pt; font-family: Consolas; color: rgb(249, 250, 244); --darkreader-inline-color:#f9faf4;" data-darkreader-inline-color="">)</span><span style="font-size: 10pt; font-family: Consolas; color: lavender; --darkreader-inline-color:#e6edfa;" data-darkreader-inline-color="">;</span></p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif">
There are several claims that only user certificates are available from <b>Windows-ROOT,
</b>local machine certificates are not actually read. We have even encountered <a href="https://bugs.openjdk.java.net/browse/JDK-6782021">
<span style="color: black; --darkreader-inline-color:#e8e7e3;" data-darkreader-inline-color=""><span style="mso-style-textfill-fill-color:black; mso-style-textfill-fill-alpha:
100.0%">https://bugs.openjdk.java.net/browse/JDK-6782021</span></span></a> and its
subsequent mails. Would just like to know, if the above properties are set, then will the machine certificates be resolved.</p>
<p style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: "Calibri", sans-serif">
Java version: Java8u201</p>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); --darkreader-inline-color:#e8e7e3;" data-darkreader-inline-color="">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); --darkreader-inline-color:#e8e7e3;" data-darkreader-inline-color="">
Regards,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); --darkreader-inline-color:#e8e7e3;" data-darkreader-inline-color="">
Manu.<br>
</div>
</body>
</html>