anchor.diff:  
   [source]
   ----
  -docker cp {container-id-from-above}:/opt/graalvm/jre/lib/amd64/libsunec.so src/main/zip.native/ssl
  +docker cp {container-id-from-above}:/opt/graalvm/jre/lib/amd64/libsunec.so src/main/zip.native/
   ----
   
   Second, cacerts, the certificate store.  You may need to periodically obtain an updated copy, also.
   [source]
   ----
  -docker cp {container-id-from-above}:/opt/graalvm/jre/lib/security/cacerts src/main/zip.native/ssl
  +docker cp {container-id-from-above}:/opt/graalvm/jre/lib/security/cacerts src/main/zip.native/
   ----
   
   Your final archive will look like this:
  
positive.code: To illustrate, the project generated by the Maven archetype, generates a JUnit test for the `RequestHandler<?, ?>` implementation, which is shown below.
  The test replicates the execution environment, for the function that is selected for invocation, as described <<choose, above>>.
  
  [source,java]
  ----
  @QuarkusTest
  
negative.code: The native executable requires some additional steps to enable client ssl that S3 and other aws libraries need.
  
  1. A custom `bootstrap` script
  2. `libsunec.so` must be added to `function.zip`
  3. `cacerts` must be added to `function.zip`
  
  To do this, first create a directory `src/main/zip.native/` with your build.  Next create a shell script file called `bootstrap`
  within `src/main/zip.native/`, like below. An example is create automatically in your build folder (target or build), called `bootstrap-example.sh`
  
  [source, shell]
  ----
  #!/usr/bin/env bash
  
  ./runner -Djava.library.path=./ -Djavax.net.ssl.trustStore=./cacerts
  ----
  
  Additional set `-Djavax.net.ssl.trustStorePassword=changeit` if your `cacerts` file is password protected.
  
  Next you must copy some files from your GraalVM distribution into `src/main/zip.native/`.
  
  NOTE: GraalVM versions can have different paths for these files, and whether you using the Java 8 or 11 version. Adjust accordingly.
  
  [source, shell]
  ----
  cp $GRAALVM_HOME/lib/libsunec.so $PROJECT_DIR/src/main/zip.native/
  cp $GRAALVM_HOME/lib/security/cacerts $PROJECT_DIR/src/main/zip.native/
  ----
  
  Now when you run the native build all these files will be included within `function.zip`
  