Watch
1
0
Fork
You've already forked jeap-truststore-maven-plugin
0
mirror of https://github.com/jeap-admin-ch/jeap-truststore-maven-plugin.git synced 2026-08-17 13:05:03 +00:00
Read-only mirror of https://github.com/jeap-admin-ch/jeap-truststore-maven-plugin — Bundesamt für Informatik und Telekommunikation. Issues & pull requests at the source. Catalog: https://www.opensource.admin.ch/en/softwares/n03q4t https://www.opensource.admin.ch/en/softwares/n03q4t
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-08-13 08:03:26 +02:00
.mvn/wrapper JEAP-4976 Re-add required test file 2024-11-15 11:25:08 +01:00
docs [skip ci] JEAP-7089 Add docs 2026-06-18 16:26:05 +02:00
src JEAP-6923 Migrate tests to JUnit 5 2026-03-31 12:03:53 +02:00
.gitignore JEAP-4976 Re-add required test file 2024-11-15 11:25:08 +01:00
AGENTS.md [skip ci] JEAP-7089 Add docs 2026-06-18 16:26:05 +02:00
CHANGELOG.md Version 3.22.0: Update parent from 8.9.1 to 8.10.0 2026-08-13 07:55:00 +02:00
CONTRIBUTING.md jEAP OSS preparation 2024-12-06 08:27:30 +01:00
LICENSE JEAP-4976 Re-add required test file 2024-11-15 11:25:08 +01:00
mvnw JEAP-4976 Re-add required test file 2024-11-15 11:25:08 +01:00
pom.xml JEAP-7107: move plugin management to internal parent 2026-08-13 08:03:26 +02:00
publiccode.yml Update version/date in publiccode.yml 2026-08-13 07:56:19 +02:00
README.md [skip ci] JEAP-7089 Add docs 2026-06-18 16:26:05 +02:00
SECURITY.md jEAP OSS preparation 2024-12-06 08:27:30 +01:00
THIRD-PARTY-LICENSES.md JEAP-4976 Re-add required test file 2024-11-15 11:25:08 +01:00

jeap-truststore-maven-plugin

jeap-truststore-maven-plugin reads X.509 certificates from a Git repository or a local directory tree, filters them by configurable criteria, and assembles them into environment-specific Java truststores (JKS or PKCS12) at build time. This lets a microservice derive its truststores from a centrally managed certificate repository, so expiring certificates can be rolled out across services without touching each service's source.

  • Single goal build-truststores bound to the generate-resources phase
  • Sources certificates from a Git repository (certificateRepositoryUrl) or a local directory (certificateRepositoryDir)
  • Builds one truststore per configured environment, with shared and environment-specific certificates
  • Authenticates Git clones via a personal-access-token environment variable, or falls back to the system Git client (SSH keys, credential helpers)
  • Respects Maven offline mode (-o, --offline)

Documentation

Start with Getting started, then follow the links below.

Topic File
Getting started (add the plugin, build a truststore) docs/getting-started.md
Goal & configuration reference docs/configuration.md
Certificate repository layout & filtering docs/certificate-repository.md

Modules

Group id for the plugin is ch.admin.bit.jeap. The version is managed by the jEAP Spring Boot parent.

Module Purpose
truststore-maven-plugin Maven plugin that assembles environment-specific truststores from X.509 certificates

Changes

This library is versioned using Semantic Versioning and all changes are documented in CHANGELOG.md following the format defined in Keep a Changelog.

Note

This repository is part the open source distribution of jEAP. See github.com/jeap-admin-ch/jeap for more information.

License

This repository is Open Source Software licensed under the Apache License 2.0.