jssl - Resolve Java SSL issues like PKIX path building failed instantly.
Diagnose, retrieve, and install certificates into Java keystores with ease.

jssl <operation> [host|file] [options]

jssl is a command-line tool to interact with Java keystores and SSL endpoints. It allows users to diagnose SSL handshake issues, retrieve remote certificates, and install them into local Java keystores. It also parses Maven logs for missing certificate errors and handles them automatically.

ping : Check the SSL handshake against a host without modifying the keystore.

install : Connect to a host, retrieve its SSL certificate, and install it into the Java keystore.

file : Process a file containing a list of hosts (one per line) to install certificates.

list : List trusted certificates currently present in the Java keystore installed with jssl.

uninstall : Remove a certificate from the Java keystore, identified by its hostname or alias.

doctor : Read Maven build logs (from stdin) and automatically detect and install missing certificates based on connection errors.

curl -sL https://raw.githubusercontent.com/pmamico/java-ssl-tools/main/install.sh | bash

Run in any terminal. On Windows, use Git Bash with administrative privileges.

brew install pmamico/keg/jssl

• JAVA_HOME environment variable must be set
• openssl must be available on the system

keytool(1), openssl(1), mvn(1)