Skip to content

Conversation

@tolusha
Copy link
Contributor

@tolusha tolusha commented Oct 22, 2025

Reference issue

eclipse-che/che#23555

Admin can add extra certificates by following the guide [1]
The problem is that those certificates are not automatically added to java key store
This PR improves that.

[1] https://eclipse.dev/che/docs/stable/administration-guide/importing-untrusted-tls-certificates/

Signed-off-by: Anatolii Bazko <[email protected]>
@github-actions
Copy link

Pull Request UBI 10 images published ✨

Base Image: quay.io/devfile/base-developer-image:ubi10-pr-240

1 similar comment
@github-actions
Copy link

Pull Request UBI 10 images published ✨

Base Image: quay.io/devfile/base-developer-image:ubi10-pr-240

@github-actions
Copy link

Pull Request images published ✨

UDI: quay.io/devfile/universal-developer-image:pr-240

1 similar comment
@github-actions
Copy link

Pull Request images published ✨

UDI: quay.io/devfile/universal-developer-image:pr-240

is_cert=false
echo "$line" >> ${tmp_file}
keytool -import -trustcacerts -cacerts -storepass "$KEYSTORE_PASSWORD" -noprompt -alias "${bundle_name}_${cert_index}" -file $tmp_file
certs_imported=$((certs_imported+1))
Copy link
Collaborator

@dkwon17 dkwon17 Oct 27, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we check the keytool command for an error and increment certs_imported only if there is no error?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed

@dkwon17
Copy link
Collaborator

dkwon17 commented Oct 28, 2025

It's working as expected:
image

image

@openshift-ci
Copy link

openshift-ci bot commented Oct 28, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dkwon17, tolusha

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Signed-off-by: Anatolii Bazko <[email protected]>
@openshift-ci
Copy link

openshift-ci bot commented Oct 29, 2025

New changes are detected. LGTM label has been removed.

@openshift-ci openshift-ci bot removed the lgtm label Oct 29, 2025
@github-actions
Copy link

Pull Request UBI 10 images published ✨

Base Image: quay.io/devfile/base-developer-image:ubi10-pr-240

@github-actions
Copy link

Pull Request images published ✨

UDI: quay.io/devfile/universal-developer-image:pr-240

@tolusha tolusha merged commit df47494 into main Oct 29, 2025
11 checks passed
@tolusha tolusha deleted the 23555 branch October 29, 2025 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants