git: openjdk/leyden: hermetic-java-runtime: Change TrustAnchorManager.loadKeyStore() to check `descriptor.storeFile` instead of `descriptor.lastModified` in non-hermetic case.

duke duke at openjdk.org
Fri Jul 19 20:34:00 UTC 2024


Changeset: bad068cd
Branch: hermetic-java-runtime
Author:    Jiangli Zhou <jianglizhou at google.com>
Date:      2024-07-19 13:30:49 +0000
URL:       https://git.openjdk.org/leyden/commit/bad068cd5bd6da024b8a370a2d7c27f29351aa9b

Change TrustAnchorManager.loadKeyStore() to check `descriptor.storeFile` instead of `descriptor.lastModified` in non-hermetic case.

The JDK cacerts file built into a docker image may has mtime set to 0.

Reviewed by Chuck Rasbold

! src/java.base/share/classes/sun/security/ssl/TrustStoreManager.java



More information about the leyden-dev mailing list