Zie ook:
https://www.ssllabs.com/ssltest/analyze.html?d=geodata.nationaalgeoregister.nl&s=145.77.103.123
Workaround:
if [ -f .cacerts ]; then
:
else
for F in /etc/ssl/certs/*; do
yes yes | keytool -import -alias $(basename "$F") -keystore .cacerts -storepass changeit -file "$F"
done
fi
export JDK_JAVA_OPTIONS="-Djavax.net.ssl.trustStore=`pwd`/.cacerts -Djavax.net.ssl.trustStorePassword=changeit"