This is a new `jlink` plugin which allows the user to specify the CA certificates it wants to include in the `cacerts` keystore in a custom runtime image. This can be very useful for creating runtimes that only contain the CA certificates that are necessary. The command-line syntax takes one or more `cacert` keystore aliases as an option, separated by a comma. For example: `jlink --cacerts "letsencryptisrgx1 [jdk]"` or `jlink --cacerts "letsencryptisrgx1 [jdk],digicertglobalrootca [jdk]"` ------------- Commit messages: - Initial revision. Changes: https://git.openjdk.org/jdk/pull/29700/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=29700&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8377102 Stats: 250 lines in 4 files changed: 247 ins; 0 del; 3 mod Patch: https://git.openjdk.org/jdk/pull/29700.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29700/head:pull/29700 PR: https://git.openjdk.org/jdk/pull/29700