V-222966
Apache Tomcat Application Server 9 Security Technical Implementation Guide
Title
DOD root CA certificates must be installed in Tomcat trust store.
Description
<VulnDiscussion>Tomcat truststores are used to validate client certificates. On the Ubuntu OS, by default, Tomcat uses the "cacerts" file as the CA trust store. The file is located in the /etc/ssl/certs/java/ folder with a link to the file in $JAVA_HOME/lib/security/cacerts. However, this location can be modified by setting the value of the javax.net.ssl.trustStore system property. Setting this property within an OS environment variable will change the location to point to a different trust stor...
Fix Text (Documentation Requirement)
Obtain and install the DOD PKI CA certificate bundles by accessing the DOD PKI office website at cyber.mil/pki-pke. Import the DOD CA certificates.