flathub / flathub/io.dbeaver.DBeaverCommunity
Can't use system installed certs
- Dominant language
- Shell
- Stars
- 25
- Forks
- 15
- Avg merge
- 14d 5h
- Merged PRs (30d)
- 1
Description
When I launch the Dbeaver flatpak, it doesn't seem to correctly pick up my system certs. In my host system, java uses /etc/pki/java/cacerts by default.
Looking at https://github.com/p11-glue/p11-kit/issues/68, I tried running:
```
flatpak run --command=p11tool io.dbeaver.DBeaverCommunity --list-all-certs --provider=p11-kit-client.so pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust
```
and it correctly shows the certs in my system.
However, if I run only:
```
flatpak run --command=p11tool io.dbeaver.DBeaverCommunity --list-all-certs
```
I don't see my system certs.
I'm thinking the issue is that the java cacerts works differently from the regularly installed certs (I don't know much about certs in general).
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the two p11tool commands shown in the issue inside the DBeaver Flatpak and compare their certificate sources. Trace how the Flatpak's Java runtime discovers its trust store, then verify that the default invocation exposes the host system certificates without requiring the explicit p11-kit provider and token arguments.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, shell
- Domain
- desktop, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100