Openjdk: Keystore load on SunPKCS11/nss-db not seeing changes in JVM runtime

Solution In Progress - Updated -

Issue

scenario:

1) create a nssdb using:

   certutil -d <path> -N

2) add there some stuff using certutil, for example:

    certutil -S -k rsa -g 2048 -n cacert1 -s "CN=cacert1" -v 120 -d . -t "C,C,C" -x

3) try to get the list of nss-db available aliases.

4) on another terminal, add or remove some stuff in nss-db

5) type something in first terminal to make a new loop and call keystore.load() again in same JVM runtime
=> the changes are not displayed, although Keystore.load() doc says it should.

Environment

Red Hat Enterprise Linux 6
openjdk

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.