Add internal cacert to /etc/ssl/certs/java/cacerts

Environment:

• Jib version: 2.6.0
• Build tool: Gradle 6.7.1
• OS: MacOS

Description of the issue: I’d like a way to add my internal cacert.pem file to the /etc/ssl/certs/java/cacerts file that comes with the base image.

Expected behavior: I specify some directory containing cacert.pem files, they all get added to the existing /etc/ssl/certs/java/cacerts in the resulting image.

This is distinct from https://github.com/GoogleContainerTools/jib/issues/2240 which merely wants to be able to replace the existing cacerts file. I want to be able append to it.

[gabrieljones]

For now, I think the best solution is to prepare your own cacerts

I’m happy to do this. Is there any kind of “official” list of CA certs published to maven central that I can reference in my build?

I found https://curl.haxx.se/docs/caextract.html

It would be so much nicer if it was published to maven central though. Regarding corporate nexus proxies and such.

[mpeddada1]

Thank you sharing your approach! Closing this issue given the availability of alternative solutions and the SO post that @chanseokoh linked.