X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=conf%2FCA%2Ftruststore.sh;h=0414c486366dcad305174c502fcd607a2684331e;hb=54883b4545dc32a5e4c7fbe0a49ef5b89a615435;hp=399048cb87645fe8b5daa79ac43444158df57ff5;hpb=306e49d4f3a285376e5173fdc9afe94467e7a02c;p=aaf%2Fauthz.git

diff --git a/conf/CA/truststore.sh b/conf/CA/truststore.sh
index 399048cb..0414c486 100644
--- a/conf/CA/truststore.sh
+++ b/conf/CA/truststore.sh
@@ -1,2 +1,5 @@
+
 echo "FYI, by convention, truststore passwords are 'changeit', but you may add something more sophisticated"
-openssl pkcs12 -export -name AAF_Root_CA -in certs/ca.crt -nokeys -out truststore.p12
+# PCKS12 does not appear to be able to mark CAs as Trusted
+# openssl pkcs12 -export -name AAF_Root_CA -in certs/ca.crt -nokeys -out truststore.p12
+keytool -importcert -file certs/ca.crt -trustcacerts -alias AAF_ROOT_CA -keystore truststore.jks