This is a new `jlink` plugin which allows the user to specify the CA certificates it wants to include in the `cacerts` keystore in a custom runtime image. This can be very useful for creating runtimes that only contain the CA certificates that are necessary.
The command-line syntax takes one or more `cacert` keystore aliases as an option, separated by a comma.
For example:
`jlink --cacerts "letsencryptisrgx1 [jdk]"`
or
`jlink --cacerts "letsencryptisrgx1 [jdk],digicertglobalrootca [jdk]"`
Sean Mullan has updated the pull request incrementally with one additional commit since the last revision: man page updates ------------- Changes: - all: https://git.openjdk.org/jdk/pull/29700/files - new: https://git.openjdk.org/jdk/pull/29700/files/78eb3847..f718afed Webrevs: - full: https://webrevs.openjdk.org/?repo=jdk&pr=29700&range=01 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=29700&range=00-01 Stats: 10 lines in 1 file changed: 10 ins; 0 del; 0 mod Patch: https://git.openjdk.org/jdk/pull/29700.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/29700/head:pull/29700 PR: https://git.openjdk.org/jdk/pull/29700