JDK-CA-CERTS(1) - General Commands Manual
jdk-ca-certs - convert a certificate bundle into a JDK-compatible store
jdk-ca-certs in-cert.pem out-jdk-cacerts
The jdk-ca-certs utility converts a PEM-formatted certificate bundle into a certificate store that can be used by the Java Development Kit (JDK). The JDK uses a standard PKCS#12 file whose certBags have an Oracle-specific key usage attribute.
The jdk-ca-certs utility exits zero on success, and >0 if an error occurs.
openssl(1), crypto(3), PEM_X509_INFO_read_bio(3)
Internet X.509 Public Key Infrastructure Certificate and CRL Profile, RFC 5280.
PKCS #12: Personal Information Exchange Syntax v1.1, RFC 7292.
Textual Encodings of PKIX, PKCS, and CMS Structures, RFC 7468.
Diagnostics are lacking and the code is not written to be portable to operating systems other than OpenBSD.
OpenBSD 8.0 - October 31, 2026 - JDK-CA-CERTS(1)