Talend Administration Center: certificate chain batch download in one-line bash command

[TalendSolutionExpert]

Task executions, Talend Administration Center tasks, or Talend Management Console API calls may fail with:

SSLHandshakeException: unable to find valid certification path to requested target

Environment

• Talend Administration Center

Resolution

To pick up all necessary certificates:

• Use the following command, replacing API-EXAMPLE-COM with your target URL, to generate several crt files necessary for the next step. 
  

  echo "" | 
      openssl s_client -showcerts -connect API-EXAMPLE-COM:443 |
      awk '/BEGIN/ { i++; } /BEGIN/, /END/ { print > "a-cert-" i ".crt"  }'

• Use keytool import to target the keystore file; if you do not use tSetKeystore specifically, then import it to the JVM used by the Talend product: 
   

  keytool -import -trustcacerts -alias xxxcert-1 -file /temp/a-cert-1.cer -keystore  jvm/lib/security/cacerts -storepass changeit
  keytool -import -trustcacerts -alias xxxcert-2 -file /temp/a-cert-2.cer -keystore  jvm/lib/security/cacerts -storepass changeit
  keytool -import -trustcacerts -alias xxxcert-3 -file /temp/a-cert-3.cer -keystore  jvm/lib/security/cacerts -storepass changeit