RFR: 8275252: Migrate cacerts from JKS to password-less PKCS12

Michael Osipov duke at openjdk.java.net
Thu Oct 14 20:06:50 UTC 2021


On Thu, 14 Oct 2021 20:02:32 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> 
> 
> For password-less pksc12, JDK-8231107 is more relevant. JDK-8274913 still has MacData, which is quite useless for cacerts, and leaving a well-known password there is awkward.

Agree, makes sense.

BTW: https://github.com/ctron/pem-keystore#reading-a-ca-bundle

-------------

PR: https://git.openjdk.java.net/jdk/pull/5948



More information about the build-dev mailing list