Last time we had the problem with StartSSL (because of osm.org switching their certificate) I tried to reach them and got no reply at all, they seem to just not care about Java and I don't believe there is something to expect from them in the future.
At least Let's Encrypt guys were very reactive as they answered my questions in a matter of minutes. We'll see if they manage to reach the Oracle truststore in the next weeks/months. 2015-12-15 23:30 GMT+01:00 Dirk Stöcker <openstreet...@dstoecker.de>: > On Tue, 15 Dec 2015, Stephan Knauss wrote: > > Dirk Stöcker writes: >> >> Cert chain is/was complete. It seems Java still does not include >>> StartSSL, but Unix versions and browsers use the system certstore. So >>> standalone non-Unixes fail. All others work. >>> >> >> probably you wanted to say WOsign here, but yes, neither that, nor >> Startcom nor IdenTrust (for Let's Encrypt) is included in the Java store. >> > > No. Really StartSSL. Wosign main cert is signed by StartSSL and I always > supply the whole chain from Intermediate, Wosign main to StartSSL (although > e.g. Firefox has all of these 3 already included). > > Just to have it as a reference in the mailing list archives: In the >> support forum Let's Entrypt said they had applied to be included in Oracles >> cacert list. So hopefully for the next renewal we'll have a better >> alternative. >> > > As far as I know StartSSL also tried and had no success till now and > probably gave up. > > This is the command to dump the contents of the certificate store to see >> whether a specific CA is included. >> > > Well I use Linux and here it worked. > > The last time I used Windows was when I wanted to update my Windows 8 to > 10. Took 2 days and the result is a broken OS (at least it booted once) and > I will now expand my Linux partition and drop Windows completely. Still > have an older Vista in a VM for seldom use. :-) > > Ciao > -- > http://www.dstoecker.eu/ (PGP key available) > _______________________________________________ > josm-dev mailing list > josm-dev@openstreetmap.org > https://lists.openstreetmap.org/listinfo/josm-dev > _______________________________________________ josm-dev mailing list josm-dev@openstreetmap.org https://lists.openstreetmap.org/listinfo/josm-dev