How to relaod the java keystore after updating the cacerts file?

Hi,

I found a similar question on this site, but the solution is not what I am looking for.
I need to know if there is a way to reload the keystore/truststore while the JVM is running?  
I tried the following after adding the certificate to the cacerts file thinking it would force the JVM to reload the cacert file but its not working.

KeyStoreFile = System.getProperty("java.home")&"/lib/security/cacerts";
System.setProperty("javax.net.ssl.keyStore", KeyStoreFile);

When I open web page I get:
Error Message: peer not authenticated
Error Type: javax.net.ssl.SSLPeerUnverifiedException

When using ColdFusions <cfhttp> tag  for an SSL site I get:
Connection Failure

If I restart the JVM the JSP page and ColdFusion <cfhttp> tag work fine. I have been successful with using a Trust ALL TrustManager to accept all certificates but this is not very secure and will not be allowed in production. I also do not want to create a new keystore each time, since it is not a solution when using ColdFusions <cfhttp> tag which will fail on SSL connections unless the certificate is trusted. So that is why I am looking for a way to reload the keystore at runtime if possible and avoid having to notify users of a restart.

Thanks
Rick
Start Free Trial