Openhab5 custom root CA

Setup, Configuration and Use Runtime
1
  • Platform information:
    • docker Container
    • openHAB version: 5.1.4-alpine
  • Issue of the topic:Adding custom root CA Certificate

Hi everyone,

I cannot find any information regarding openhab5 and custom CAs.

I’m trying to send a httpPostRequest to a selfhosted service, which is secured by a custom root CA.

Adding my root-ca file to /usr/local/share/ca-certificates works for my influxdb connection.

But using actions.http… shows a java error complaining about missing pki.

I tried adding it to the keystore, but I cannot find the correct password.

Is there any simple way to add a custom rootCa to a container?

Thanks

2

The password for $OH_USERDATA/etc/keystore should be openhab. The keystore for Java is usually $JAVA_HOME/lib/security/cacerts with the usual default password of changeme.

Java, and therefore openHAB, has it’s own keystore and doesn’t use the system, wide ca-certificates.

3

The InfluxDB add-on docs contain a detailed guide on how to add custom CAs to the JVM: InfluxDB (0.9 and newer) - Persistence Services | openHAB