We have a windows AD domain with servers and clients. The domain also has a Windows Certificate Authority (AD CS). The CA is trusted in the domain by publishing it's public key in the local certificate store for all machines.
We have a website that uses a local address (
https://mysite.corp.net) that uses a domain signed certificate. Most clients on the Windows Machines trust the connection, since it is signed by the CA that is trusted by Windows.
Now I have a java client application, that doesn't trust the domain signed certificate, and thus refuses to connect.
How do i tell the java application to trust the certificate for this site, or better, to trust the CA?
- I can't 'overrule' or 'ignore' the certificates.
- I need to make sure that the certificates are up-to-date, so that a revoked certificate (or even CA) will not be trusted.