Scala – sbt failing to start up with sun certificate errors on mac

You can do that in one command:

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365

You can also add -nodes (short for no DES) if you don't want to protect your private key with a passphrase. Otherwise it will prompt you for "at least a 4 character" password.

The days parameter (365) you can replace with any number to affect the expiration date. It will then prompt you for things like "Country Name", but you can just hit Enter and accept the defaults.

Add -subj '/CN=localhost' to suppress questions about the contents of the certificate (replace localhost with your desired domain).

Self-signed certificates are not validated with any third party unless you import them to the browsers previously. If you need more security, you should use a certificate signed by a certificate authority (CA).

On Windows the easiest way is to use the program portecle.

1. Download and install portecle.
2. First make 100% sure you know which JRE or JDK is being used to run your program. On a 64 bit Windows 7 there could be quite a few JREs. Process Explorer can help you with this or you can use: System.out.println(System.getProperty("java.home"));
3. Copy the file JAVA_HOME\lib\security\cacerts to another folder.
4. In Portecle click File > Open Keystore File
5. Select the cacerts file
6. Enter this password: changeit
7. Click Tools > Import Trusted Certificate
8. Browse for the file mycertificate.pem
9. Click Import
10. Click OK for the warning about the trust path.
11. Click OK when it displays the details about the certificate.
12. Click Yes to accept the certificate as trusted.
13. When it asks for an alias click OK and click OK again when it says it has imported the certificate.
14. Click save. Don’t forget this or the change is discarded.
15. Copy the file cacerts back where you found it.

On Linux:

You can download the SSL certificate from a web server that is already using it like this:

$ echo -n | openssl s_client -connect www.example.com:443 | \
   sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/examplecert.crt

Optionally verify the certificate information:

$ openssl x509 -in /tmp/examplecert.crt -text

Import the certificate into the Java cacerts keystore:

$ keytool -import -trustcacerts -keystore /opt/java/jre/lib/security/cacerts \
   -storepass changeit -noprompt -alias mycert -file /tmp/examplecert.crt