IcedTea 1.8.x doesn't support certs signed with EC algorithm (essentially forcing to use RSA). The fix is quite trivial and looks like it was fixed in master years ago but never made it to 1.8.8: https://github.com/AdoptOpenJDK/IcedTea-Web/commit/b7e60b82bf3afc8f54bc115cc7b4318d64cec3d7#diff-dd75a10187be352eb16cab632b1491e4aff2c19577cf9ebea7d0d62326cd28fa Given that IcedTea is often still a requirement (where OWS is not supported or cannot be used), Can we port this to 1.8.x and have a 1.8.9 release?