Agent initializes Java truststore

Describe the bug

Environment

Wildfly 17.0.1 Java 11

We made a big version jump of the Elastic Apm Agent version in one of our environments (1.4.0 -> 1.16.0) and immediately saw our ldap connection fail. This connection uses internal certificates which are not stored in the default java truststore. The truststore is not set in the jvm options but will be set from the application at deployment like this example

System.setProperty("javax.net.ssl.trustStore", truststoreLocation);
System.setProperty("javax.net.ssl.trustStorePassword", truststorePassword);

Debugging via -Djavax.net.debug=all showed us that the apm agent since version 1.13.0 initializes the default truststore before Wildfly even starts which breaks our truststore initialization.

Steps to reproduce

Steps to reproduce the behavior:

1. Download Wildfly from https://wildfly.org/downloads/ and extract it
2. Add the following JAVA_OPTS in the wildfly config at <wildfly-dir>/bin/standalone.conf (Linux) or <wildfly-dir>/bin/standalone.conf.bat (Windows) -javaagent:<path-to-agent>/elastic-apm-agent.jar -Delastic.apm.service_name=App -Delastic.apm.server_urls=http://localhost:8200 -Delastic.apm.application_packages=com.example -Delastic.apm.environment="development" -Djavax.net.debug=all
3. Start wildfly with the start script found in <wildfly-dir>/bin/standalone.sh (Linux) or <wildfly-dir>/bin/standalone.bat (Windows)
4. With apm versions >= 1.13.0 the whole default truststore will be printed to the console/log before this log message appears INFO co.elastic.apm.agent.report.ApmServerHealthChecker - Elastic APM server is available: { "build_date": "2020-05-12T00:04:54Z", "build_sha": "64e91c95329991c36b16ff94fd34ea75230c06c2", "version": "7.7.0"}

Expected behavior

Expected would be that the agent like before does not initialize the Java truststore.

Debug logs

If needed I can add the debug logs.

[theobisproject]

The latest test version also works as expected

[eyalkoren]

Thanks for reporting! Working on a fix, will let you test once we have it.