flathub / flathub/io.dbeaver.DBeaverCommunity

Can't use system installed certs

Open
#1 7 comments 0 reactions 0 assignees View on GitHub
bug help wanted
Dominant language
Shell
Stars
25
Forks
15
Avg merge
14d 5h
Merged PRs (30d)
1

Description

When I launch the Dbeaver flatpak, it doesn't seem to correctly pick up my system certs. In my host system, java uses /etc/pki/java/cacerts by default.

Looking at https://github.com/p11-glue/p11-kit/issues/68, I tried running:
```
flatpak run --command=p11tool io.dbeaver.DBeaverCommunity --list-all-certs --provider=p11-kit-client.so pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust
```
and it correctly shows the certs in my system.

However, if I run only:
```
flatpak run --command=p11tool io.dbeaver.DBeaverCommunity --list-all-certs
```
I don't see my system certs.

I'm thinking the issue is that the java cacerts works differently from the regularly installed certs (I don't know much about certs in general).

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the two p11tool commands shown in the issue inside the DBeaver Flatpak and compare their certificate sources. Trace how the Flatpak's Java runtime discovers its trust store, then verify that the default invocation exposes the host system certificates without requiring the explicit p11-kit provider and token arguments.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, shell
Domain
desktop, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.