Description
Certificate-verified fcli connections always apply a built-in CA-key distrust policy, including CVE-2026-91403 and CVE-2026-114820. This policy applies to default, custom, OS and trusted-URL stores in both JAR and native distributions. Adding certificates cannot override distrust. Replace affected server chains rather than disabling verification. External tools launched by fcli use their own trust configuration.
Generic fcli options (also see documentation link below)
- -h, --help
-
Use 'fcli [command] -h' to display help for fcli (sub-)commands.
Commands
- add-trusted-url
-
Add trusted URL by retrieving and storing server root certificate.
- clear
-
Clear SSL trust store configuration to use default trust store.
- clear-trusted-urls
-
Clear all trusted URLs and imported certificates.
- get
-
Get current SSL trust store configuration.
- list-trusted-urls
-
List trusted URLs.
- remove-trusted-url
-
Remove trusted URL.
- set
-
Configure SSL trust store.