[aerogear-dev] Using Let's encrypt SSL certificates with Java sender API

[ag0ny]

Hi,

just want to let you know that you might hit a problem using an official
certificate from Let's encrypt ( https://letsencrypt.org/ ) in Wildfly
Applicationserver for securing UPS-console.

Sending messages directly from within the UPS-console and with curl
works. But using the Java sender API does not and leads to the following
exception:

http://pastebin.com/0BAPK2kw

The following software environment was used:

- Wildfly Full 9.0.2.Final
- JDK 1.8.0_74-b02
- UPS 1.1.0.Final
- UP-Java-Client-1.1.0.Final

The reason for this, as it seems, is that the root ca certificate for
Let's encrypt is not included in the cacerts of the original JDK from
Oracle. As a workaround you can just copy the cacerts from an actual
OpenJDK (Tested with OpenJDK-6 from Ubuntu 14.04) to
$JAVA_HOME/jre/lib/security/. Most preferably make a copy of the
original file before. :-)

Maybe this is useful for somebody else.

Cheers,

Sascha