cacerts : Java Glossary

cacerts

A file used to keep the root certificates of signing authorities.

The default password for the .cacerts file is changeit.

In the JRE look for it in:

cacerts list of trusted certificate authorities :

in C:\Program Files\java\jre6\lib\security\cacerts in JRE 1.6.0 on your local hard disk.
in J:\Program Files\java\jdk1.6.0_17\jre\lib\security\cacerts in JDK 1.6.0 on your local hard disk.
in C:\Program Files\java\jre1.5.0_22\lib\security\cacerts in the older JRE 1.5.0 on your local hard disk.
in J:\Program Files\java\jdk1.5.0_22\jre\lib\security\cacerts in the older JDK 1.5.0 on your local hard disk.

Since cacerts is a binary file, you must view it with keytool.exe using code like this.

Just to confuse you, there are even other copies of it in C:\Program Files\Java Web Start\cacerts. On my machine I found 10 copies! Lot’s of luck guessing which one it is using at any given time.

Since you implicitly trust all the Certificate Authorities in the cacerts. file for code signing and verification you must manage the cacerts. file carefully. The cacerts. file should contain only certificates of the CAs you trust.

cacerts. is stored in jks format (Java Key Store) similar to PKCS #12 containing only public keys, protected by a passphrase, but no private keys. It may also contain SSL keys.

The first four signature bytes of a Sun cacerts. file in hex are FEEDFEED.

.cacerts Finder/Viewer
Assembla: accessing the Windows certificate repository from Java
certificate
keyman: a more user-friendly cacerts manipulator
keystore
KeyTool IUI: third party GUI version of keytool
keytool.exe
PKCS
SSL

	You can get the freshest copy of this page from:	or possibly from your local J: drive (Java virtual drive/mindprod.com website mirror)
	http://mindprod.com/jgloss/cacerts.html	J:\mindprod\jgloss\cacerts.html
	Please email your feedback for publication, errors, omissions, typos, formatting errors, ambiguities, unclear wording, broken/redirected link reports, suggestions to improve this page or comments to Roedy Green :
	Canadian Mind Products
	mindprod.com IP:[65.110.21.43]
view Blog	Your face IP:[38.107.191.105]
Feedback	You are visitor number 33,808.