Install CA certs on RedHat/CentOS 6/7/8
Install the ca-certificates package
yum install ca-certificates
Enable the dynamic CA configuration feature
update-ca-trust force-enable
Copy ca file to /etc/pki/ca-trust/source/anchors/
cp ca.pem /etc/pki/ca-trust/source/anchors/
Run command
update-ca-trust extract
Check the CA cert is installed into ca-bundle.crt
head /etc/pki/tls/certs/ca-bundle.crt
Install CA certs to JDK
keytool -importcert -alias friendly_name -file ca.pem -storepass changeit