# HG changeset patch
# User Oleksandr Gavenko <gavenkoa@gmail.com>
# Date 1419937171 -7200
# Node ID bc3de0d9061a6a1b40351e7740824ae4c2822697
# Parent  c77807176b360019145cf96d6195999f1e6c8316# Parent  1cabdf6fe2964985dd16b7f04c1f29efc5ec1384
merged

diff -r c77807176b36 -r bc3de0d9061a java.rst
--- a/java.rst	Sun Dec 28 00:49:35 2014 +0200
+++ b/java.rst	Tue Dec 30 12:59:31 2014 +0200
@@ -201,6 +201,32 @@
   http://mvnrepository.com/search.html?query=PKG
   http://www.jarfinder.com
 
+Import SSL certificate.
+=======================
+
+Get cert with::
+
+  $ openssl s_client -connect promin-test.it.loc:433
+
+  -----BEGIN CERTIFICATE-----
+  ...
+  -----END CERTIFICATE-----
+
+or by opening URL in broswer and exporting in "Page info" ==> "Security" menu.
+
+Call import utility with default ``changeit`` password::
+
+  $ keytool -importcert -file $YOUR.crt -keystore $JAVA_HOME/jre/lib/security/cacert -alias $ANY -storepass changeit
+  $ keytool -list -v -keystore $JAVA_HOME/jre/lib/security/cacert -storepass changeit
+
+Import certificate system wide in Debian by (note, ``.crt`` extention is
+mandatory)::
+
+  $ sudo mkdir /usr/share/ca-certificates/$ANY/    # don't mess with other certs
+  $ sudo cp /tmp/$YOUR.crt /usr/share/ca-certificates/$ANY/
+  $ sudo dpkg-reconfigure --force ca-certificates  # check your cert in curses GUI!
+  $ sudo update-ca-certificates --fresh --verbose
+
 Java EE versions.
 =================