cacerts and OSX

[Dalibor Topic]

On 5/31/12 2:49 PM, Henri Gomez wrote:
> Hi to all,
> 
> It seems cacerts (JAVA_BASE/Contents/Home/jre/lib/security/cacerts)
> are no more correct for stock OpenJDK 7 built on OSX.

CA certs aren't part of OpenJDK sources. 
See http://hg.openjdk.java.net/jdk7/build/raw-file/tip/README-builds.html#cacerts
for details, in particular:

"The source contain a cacerts file without CA root certificates. Formal JDK builders 
will need to secure permission from each public CA and include the certificates into 
their own custom cacerts file."

cheers,
dalibor topic
-- 
Oracle <http://www.oracle.com>
Dalibor Topic | Principal Product Manager
Phone: +494089091214 <tel:+494089091214> | Mobile: +491737185961 <tel:+491737185961>
Oracle Java Platform Group

ORACLE Deutschland B.V. & Co. KG | Nagelsweg 55 | 20097 Hamburg

ORACLE Deutschland B.V. & Co. KG
Hauptverwaltung: Riesstr. 25, D-80992 München
Registergericht: Amtsgericht München, HRA 95603
Geschäftsführer: Jürgen Kunz

Komplementärin: ORACLE Deutschland Verwaltung B.V.
Hertogswetering 163/167, 3543 AS Utrecht, Niederlande
Handelsregister der Handelskammer Midden-Niederlande, Nr. 30143697
Geschäftsführer: Alexander van der Ven, Astrid Kepper, Val Maher

Green Oracle <http://www.oracle.com/commitment> Oracle is committed to developing practices and products that help protect the environment