A command-line utility to manage certificates in all the installed JDKs discovered. Visit the JDKCertsTool documentation site for the full guide.
Modern JDKs rely on a trusted certificate store to securely connect to HTTPS services. But managing these certificates—especially across multiple installed JDKs—can be a pain.
JDKCertsTool makes devs life easy!
- ✅ Add or remove custom certificates (like corporate or internal CA certs).
- 🔍 Search Certificates by exact-match, fuzzy-match or regex on alias.
- 🔍 Discover installed JDKs automatically, or limit scopes to explicitly isolated paths.
- 🔐 Uses keytool under the hood — no need to learn its syntax.
- ⚡ Executes keytool operations in parallel across discovered JDKs for better throughput.
If you’ve ever hit SSL or trust errors when using Java with internal services, APIs, or behind proxies, this tool helps you fix that in seconds.
Note that this is a developer tool which assumes usage on development environment.
This assumption translates, for example, in having the same password (or the default changeit) for all the
truststores and implicitly assuming the cacerts truststore.
JDKCertsTool manages the JDK truststore only — the TrustedCertEntry entries that hold the public certificates of
external services you connect to, such as:
- Package-registry APIs and other HTTPS endpoints,
- HTTP client requests and secure database connections,
- corporate proxy / firewall CA certificates required to reach the internet behind a company gateway.
Concretely, it works on the default cacerts truststore (JDKs > 8) or resolves the default truststore path on
older JDKs.
It is not concerned with the application keystore, i.e. PrivateKeyEntry entries. Those hold private material —
TLS/HTTPS server keys used to decrypt traffic, keys used to sign JWT tokens or other artifacts before distribution — and
must be managed securely by the application itself. Managing private keys is explicitly out of scope for this
tool.
brew tap ADarko22/tap
brew install jdkcerts
# or upgrade with
brew upgrade jdkcertsUse the installed jdkcerts command:
jdkcerts --helpSee the Commands Reference on the documentation site to learn about the commands, their options and examples.
Your contributions are welcome! Start with the Contributing Guide. Deep-dive developer and architecture docs live on the documentation site.
Found a security issue? Please follow the Security Policy instead of opening a public issue.
This project is licensed under the Apache License 2.0.