onedevatlasBeta
Browse the atlas
AllABAPCAPUI5BTP
PackagePackagetypeA library you install and call yourself.See every one →What this type is →independently maintainedindependently maintainedoriginPublished by one person or a small company outside SAP. Says nothing about quality; the readings say that.See every one →

zstrust

A tool that updates the root certificate authorities in an SAP NetWeaver server from Mozilla's certificate store, checking first that each certificate is valid and not already on the system.

zstrust automatically updates the root certificate authorities in an SAP NetWeaver server. Before it updates one, it checks that the source's certificate is valid and that it is not already on the system. Mozilla is the one supported source, and the maintainer lists support for only Mozilla's certificate store as a limitation. Nothing on the page names a program, a transaction, an installation method or an ABAP release.

GitHub11 ★
abaplint417 lines

Facts

Last pushLicenceMIT

Where it sits

Lives in
ABAP
Provides
Certificate managementABAPCertificate managementcapabilityKeeping the certificates a system trusts and presents over TLS current: importing root and intermediate CAs, requesting and importing its own signed certificate, and replacing one before it expires. Storing and rotating passwords and keys an application reads is [secrets rotation](capability:secrets-rotation).
Flavors
Standard ABAP

Who is behind it

Mustafa Kerim YılmazMustafa Kerim YılmazPersonMaintains this
In the atlas: maintains 2, contributes to 2@mkysoftmaintainerLars HvamPersonContributes to this
In the atlas: maintains 13, contributes to 92, wrote 1@larshp1 contributor

Before choosing this

Conditions

PracticalFunctional boundary

Not where the system must not trust whatever the source trusts: the README states that you must trust the source, currently Mozilla, because the system can then reach every website holding a certificate generated by a root CA that source supplies. It installs those root CAs automatically, and the maintainer marks the tool use at own risk.

What it declares

Every artifact

Type
Package
Origin
Independently maintained

As a package

Where it runs
does not say
Distributed through
does not say

Connections1

README

quoted from mkysoft/zstrust under MIT, read
mkysoft/zstrust/README.mdOn GitHub

zstrust

Auto Root CA Updater. This tool automatically updates root certificate authorities in SAP Netweaver Server.

Supported Root CA sources

Mozilla

Features

  • Checking root CA source certificate is valid and exists on the system before updating.

Limitations

Only Mozilla certificate store supported.

NOTE

This tool automatically installs new Root CAs to your system. You must trust the source (currently Mozilla). Your system can access whole websites which have a certificate generated by root CA's supplied by the given source.

Use at own risk

MIT, read

Others providing2

Compare all 3 on the Certificate management page →
Certificate management
  1. abapPM/ABAP-StrustClass-based wrapper around STRUST certificate managementfrom ABAP
  2. SAP Custom Domain ServiceServes BTP applications under the customer's own domainfrom BTP/BAIP

Details

Sources3
Added by handdiscovered herechecked
github.com/mkysoft/zstrusttree, pushes, contributors, CIchecked
README.mdquoted, and what the entry declareschecked

Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.

Compatibility and provenance
discovered viaAdded by hand
first seen in the atlas
ecosystem and domainabap, security-and-compliance
abaplint
issues under its own abaplint configuration179
lines417
statements220
objects3
files5
analysed, main
abaplint version2.120.84
read fromabaplint.app,
Flavors1
Standard ABAP
“This tool automatically updates root certificate authorities in SAP Netweaver Server.” — mkysoft/zstrust — READMEchecked
Contributors1
Lars Hvam

From the repository’s contributor list, .

History in the atlas1
  1. First seen.
For your agent
Ref
artifact:mkysoft-zstrust
JSON
/artifacts/mkysoft-zstrust.json
MCP
Connecting an agent