Stupid question probably but, with Lucee 5.3.9.173, where do I find the Trusted Store for certificates ? Or is there a UI way to see what root CA certificates my Lucee installation already trusts ?

@Adam Brunt, Since Lucee runs in Java, the certs are all managed by the Java instance Lucee is running under. Here's a link (se the Java TrustStore) that give commands about seeing the cacerts list: https://www.baeldung.com/java-keystore-truststore-difference So to find your answer, you're going to need to run the

keytool

command for the Java instance powering Lucee.

maybe also ./lucee/lib/lucee-server/context/security/cacerts

Ah, OK. Thanks both - that seems to make sense. Basically, I am trying to get a handle on what I need to confirm/action so that our application won't find the below a problem:

From 6th November the SSL connection between your application and us will be protected with a certificate issued under the new G2 root (managed by DigiCert). You need to ensure your application trusts this new root CA certificate but I would guess most trust stores (browsers, Java etc.) may already include this new root.

Presumably I am on the right track ?