setup-java

actions/setup-java

Fork 0

mirror of https://github.com/actions/setup-java.git synced 2026-06-23 16:29:39 +00:00

Author	SHA1	Message	Date
Bruno Borges	1ccf20a51c	docs: add post-install keytool import for the JDK cacerts trust store Document how to make the installed JDK trust an internal CA at application runtime by importing it into $JAVA_HOME/lib/security/cacerts with keytool after setup-java runs. Clarifies this is the runtime trust layer, distinct from the download/transport layer (NODE_EXTRA_CA_CERTS), and notes hosted vs self-hosted persistence caveats. Refs #640 #1035 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-06-22 21:55:50 -04:00
Bruno Borges	ed629118c0	docs: document self-signed certificate / internal CA handling for GitHub Enterprise Adds an advanced-usage section explaining the 'self signed certificate in certificate chain' error seen on GitHub Enterprise Server and behind TLS-inspecting proxies. Recommends the secure fix of trusting the internal CA via NODE_EXTRA_CA_CERTS (or the OS trust store on self-hosted runners), with a GitHub Enterprise callout, and warns against disabling TLS verification since the JDK download has no checksum fallback. Refs #640 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-06-22 21:48:13 -04:00

Author

SHA1

Message

Date

Bruno Borges

1ccf20a51c

docs: add post-install keytool import for the JDK cacerts trust store

Document how to make the installed JDK trust an internal CA at application
runtime by importing it into $JAVA_HOME/lib/security/cacerts with keytool
after setup-java runs. Clarifies this is the runtime trust layer, distinct
from the download/transport layer (NODE_EXTRA_CA_CERTS), and notes hosted vs
self-hosted persistence caveats.

Refs #640 #1035

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-22 21:55:50 -04:00

Bruno Borges

ed629118c0

docs: document self-signed certificate / internal CA handling for GitHub Enterprise

Adds an advanced-usage section explaining the 'self signed certificate in
certificate chain' error seen on GitHub Enterprise Server and behind
TLS-inspecting proxies. Recommends the secure fix of trusting the internal
CA via NODE_EXTRA_CA_CERTS (or the OS trust store on self-hosted runners),
with a GitHub Enterprise callout, and warns against disabling TLS
verification since the JDK download has no checksum fallback.

Refs #640

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-22 21:48:13 -04:00

Compare commits

2 Commits

main .. docs/self-signed-ca-enterprise

Diff Content Not Available

Compare commits

2 Commits main .. docs/self-signed-ca-enterprise

Diff Content Not Available

2 Commits

main .. docs/self-signed-ca-enterprise