4 ms·
One additional note, most applications in Windows by proxy follow this OS level list of trusted certificates. Notable exceptions are Java and Firefox which mai
by mey 10y ago
One additional note, most applications in Windows by proxy follow this OS level list of trusted certificates. Notable exceptions are Java and Firefox which maintain their own CA repositories in their installations.
- friendzis 10y agoThis is the reason I hate JVM from sysadmin/devops perspective. It tries to manage things that should be left to OS (CAs, fonts, time, etc.). It's not too big of a problem for end user applications with package manager maintained JVM, but if you want to use JVM for any kind of daemon (application server, database, messaging system) your sysadmin has to become jvmadmin too. It would not be such a bad thing if you really, really wanted to manage system per application if there was "fallback to OS" option. But then again moderately sized applications have been run in their own virtual machines for quite some time and these days containers are pretty prevalent solution for self containing even small applications.