לעברית לחצו כאן
Update: as of 3 May 2019, a new certificate installation software was released, the new software automatically installs the certificate also in Java Runtime Environment.
Java Runtime Environment
The Java Runtime does not use the OS certificate store, but instead maintains it's own trusted certificate store. In order for Java based programs (e. g. Eclipse IDE) to be able to access secure sites, It is necessary to install a security certificate for Java separately using the dedicated tool that comes as part of the JVM.
Download the NetFree Security certificate from. https://netfree.link/netfree-ca.crt
On windows systems, in case you have installed the security certificate installer, the certificate already exists in the following location:
Once you know the certificate location path, run a command line - CMD in the Command Prompt window run as an administrator, and move to the folder where the keytool software is located - the dedicated tool for adding a security certificate to the unique certificate database for JAVA.
"keytool" is located in the following location:
C:\Program Files\Java\jdk<הגירסה המותקנת אצלכם>\bin
After navigating the command line to the keytool location and checking that it exists in that location (by running the keytool command and checking the output, or running directly at any location where you will be of the command "JAVA_HOME%\bin\keytool%")
Write the following command (the exact location of the security certificate file):
keytool -importcert -trustcacerts -alias netfree-ca -file %ProgramData%\NetFree\CA\netfree-ca-last.crt -keystore "%JAVA_HOME%/jre/lib/security/cacerts" -storepass changeit -noprompt
The command output should be like this:
certificate added to the keysotre.
In any case if the output is not like this, you should check the output that appears in depth and see which data is incorrect.
In order for the changes to take effect on software that has a security issue, the software must be restarted.
Command for Mac / Linux computers
KEYSTORE=/path/to/cacerts curl -sL https://netfree.link/netfree-ca.crt | keytool -importcert -trustcacerts -alias netfree-ca-$(date "+%m%d%H%M%S") -keystore $KEYSTORE -storepass changeit -noprompt
Note: The above command downloads and also installs the certificate without leaving a trace in the file system. The certificate is given a unique name so that it can be installed again and again without any problems. This is useful in case of changing a supplier and needs to be installed again.
Sometimes JAVA-based software installs a private Java Runtime Environment in Program Files instead of using the globally installed environment (e.g., all intelij software (including android studio)). In this case it is necessary to import the NetFree certificate for each software separately.
To import the certificate, you must first locate the file that stores the certificates. Usually the JAVA environment is installed in program files in a subfolder named java or jre. Inside the subfolder there will be a path named:
lib\security\ and inside it a file named
You can search for files named cacerts at the command prompt using the following command:
dir c:\ /s /b | findstr -i cacerts
You can also search for the cacerts file that the software uses, with search software such as everything searching for the word cacerts and check the path of the file.
Solution 1 (recommended)
Find the path to the
cacerts file in the specific software installation, and use this path with the command mentioned above.
The security certificate can be imported using graphical software called KeyStore Explorer, the software is downloadable from here.
Instructions for use of KeyStore Explorer software:
The software usually needs to be run as a administrator.
In the welcome window, click on the highlighted area:
In the window that opens, choose the
cacerts file, which is in the location described above.
A password request will now appear:
The default password is
Now the file is open and we will see a list of existing certificates . Click "Import Trusted Certificates":
And select the NetFree certificate file. (can be downloaded from here).
In the next window, click "OK".