RFR CSR for 8162628: Migrating cacerts keystore to password-less PKCS12 format

Weijun Wang weijun.wang at oracle.com
Fri Aug 2 07:28:06 UTC 2019



> On Jun 1, 2019, at 7:17 PM, Michael Osipov <1983-01-06 at gmx.net> wrote:
> 
> Can you please explain why not simple PEM bundles like OpenSSL have been
> chosen?

Is that /etc/ssl/certs on Ubuntu? It's a directory containing a lot of PEM files. Do you prefer this style or a big file containing multiple PEM blocks?

Thanks,
Max

> This could have eased maintenance by factors, plus it is easy
> greppable.




More information about the security-dev mailing list