RFR: 8275252: Migrate cacerts from JKS to password-less PKCS12 [v2]

[Sean Mullan]

On Tue, 19 Oct 2021 19:48:23 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> The cacerts file is now a password-less PKCS12 file. This make sure old code that uses a JKS KeyStore object can continuously load it using a null password (in fact, any password) and see all certificates inside.
>
> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
> 
>   use a standard name

Marked as reviewed by mullan (Reviewer).

make/jdk/src/classes/build/tools/generatecacerts/GenerateCacerts.java line 54:

> 52:     public static void store(String dir, OutputStream stream) throws Exception {
> 53: 
> 54:         CertificateFactory cf = CertificateFactory.getInstance("X509");

Nit: better to use the standard name here: "X.509".

-------------

PR: https://git.openjdk.java.net/jdk/pull/5948