[14] RFR 8162628: Migrate cacerts keystore from JKS

[Sean Mullan]

On 8/13/19 10:19 PM, Weijun Wang wrote:
>> I will also pass a pretty large cacerts with public CA and our CAs and
>> see wether your parser doesn't choke on it.
> PEM is certainly slower than JKS because of text reading and de-Base64. I'll see if I can make any enhancement.

This is a bit of a concern for me. In the past, reading cacerts has been 
a bit of a bottleneck and we have made some improvements over the years 
such as: https://bugs.openjdk.java.net/browse/JDK-8129988

I would not want to see a regression in performance.

--Sean