FROM harbor.wisetm.cn/base/anolisos-oraclejdk:371-1.0.1_fixed
COPY key/CFCA_OV_OCA.cer /var/lib/ca/CFCA_OV_OCA.cer
COPY key/CFCA_EV_ROOT.crt /var/lib/ca/CFCA_EV_ROOT.crt
COPY key/DigiCert-Global-Root-G2-Cross-G1.crt /var/lib/ca/DigiCert-Global-Root-G2-Cross-G1.crt
COPY key/globalsign-R1-R3.cer /var/lib/ca/globalsign-R1-R3.cer

RUN keytool -import -alias cfca_ov_oca -keystore /usr/local/java/jdk1.8.0_371/jre/lib/security/cacerts -storepass changeit -noprompt -file /var/lib/ca/CFCA_OV_OCA.cer \
&& keytool -import -alias cfca_ev_root -keystore /usr/local/java/jdk1.8.0_371/jre/lib/security/cacerts -storepass changeit -noprompt -file  /var/lib/ca/CFCA_EV_ROOT.crt \
&& keytool -import -alias digicert-global-root-g2-cross-g1 -keystore /usr/local/java/jdk1.8.0_371/jre/lib/security/cacerts -storepass changeit -noprompt -file  /var/lib/ca/DigiCert-Global-Root-G2-Cross-G1.crt \
&& keytool -import -alias globalsign-r1-r3 -keystore /usr/local/java/jdk1.8.0_371/jre/lib/security/cacerts -storepass changeit -noprompt -file  /var/lib/ca/globalsign-R1-R3.cer