[Java] Agent SSL Certificates

We’re running the javaagent with ActiveMQ, which is set up to use a custom truststore. To connect to New Relic, we need to import the New Relic certificate into that truststore. Documentation at https://docs.newrelic.com/docs/agents/java-agent/configuration/configuring-your-ssl-certificates indicates that there is an nrcerts file in newrelic.jar that contains those certificates, but that file is nowhere in newrelic.jar, or anywhere else in the agent files I can find. Where can I get nrcerts, or another Java keystore file with the New Relic certificate in it?

@bbainbridge sorry for the confusion with the documentation. We need to update the doc with the new information. The New Relic Java agent for APM is now Open Source and as such, the certificate bundle has been removed.

We provided the information in the release notes at https://docs.newrelic.com/docs/release-notes/agent-release-notes/java-release-notes/java-agent-600 but have not updated other documentation that is affected.

If you are using a custom truststore the configuration option you need is documented at https://docs.newrelic.com/docs/agents/java-agent/configuration/java-agent-configuration-config-file#ca_config_bundle

I’ll work with our docs team to get the updates made.

1 Like