How to Install CA Certs on an RPM-Based OS?

To trust the server certificate on an Artifactory/Xray (RPM installation), we recommend executing the following commands (Note: Both will require root access):

1. Extract the trusted certs
 

/usr/bin/p11-kit extract --format=java-cacerts --filter=certificates --overwrite --purpose server-auth /etc/pki/ca-trust/extracted/java/cacerts

2. Import the untrusted server certificate

keytool -import -alias <art> -file <file.cer> -keystore “/etc/pki/ca-trust/extracted/java/cacerts” -storepass changeit