RFR: 8377102: cacerts jlink plugin

[Alan Bateman]

On Thu, 12 Feb 2026 18:12:34 GMT, Sean Mullan <mullan at openjdk.org> wrote:

> This is a new `jlink` plugin which allows the user to specify the CA certificates it wants to include in the `cacerts` keystore in a custom runtime image. This can be very useful for creating runtimes that only contain the CA certificates that are necessary.
> 
> The command-line syntax takes one or more `cacert` keystore aliases as an option, separated by a comma.
> 
> For example: 
> 
> `jlink --cacerts "letsencryptisrgx1 [jdk]"`
> 
> or
> 
> `jlink --cacerts "letsencryptisrgx1 [jdk],digicertglobalrootca [jdk]"`

Are you planning to update the man page?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/29700#issuecomment-3898427375