File to import certificate to keystore

import_cert.sh

#!/usr/bin/env sh

KEYSTORE_FILE=./keystore.jks
KEYSTORE_PASS=agweria

HOST=$1
PORT=$2

# get the SSL certificate
openssl s_client -connect "${HOST}":"${PORT}" </dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >"${HOST}".cert

# delete the old alias and then import the new one
keytool -delete -keystore ${KEYSTORE_FILE} -storepass ${KEYSTORE_PASS} -alias "${HOST}" &>/dev/null

# create a keystore and import certificate
keytool -import -noprompt -trustcacerts \
  -alias "${HOST}" -file "${HOST}".cert \
  -keystore ${KEYSTORE_FILE} -storepass ${KEYSTORE_PASS}

rm "${HOST}".cert

Usage

./import_cert.sh HOST PORT