diff --git a/custom/jake.bash b/custom/jake.bash
index ead1b8abcf..26065d8a1c 100644
--- a/custom/jake.bash
+++ b/custom/jake.bash
@@ -15,6 +15,13 @@ if [ -v WSL_WINDOWS_USER_HOME ]; then
 	export KUBECONFIG
 fi
 
+# (TODO: this probably doesn't always work. Didn't for gradle at least)
+# Enable java to read the cacertificates from linux. Technically, there's an intermediate process (ca-certificates-java)
+# that copies to here, but it's close enough to update-ca-certificates that you only need to know this if you're getting
+# errors
+JAVA_TOOL_OPTIONS+=" -Djavax.net.ssl.trustStore=/etc/ssl/certs/java"
+export JAVA_TOOL_OPTIONS
+
 # The python library `webbrowser` has some weird hiccups. Setting this environment variable
 # allows the aws cli and my ~/bin/splunk tool to avoid experiencing an `tcgetpgrp failed: Not a tty` error
 # (I no longer need to set AWS_BROWSER, as it defaults to BROWSER)