[8u] Is it possible to bring root certificates to OpenJDK 8 [JEP319] ?

Langer, Christoph christoph.langer at sap.com
Sun Mar 24 20:38:14 UTC 2019


Hi Sean,

> > Now my questions are: Is it legally possible to bring these root certificates
> also into OpenJDK 8? Since it is a JEP, can the “feature” be added to OpenJDK
> 8 via an update release? And, last but not least, would there be interest in
> the community for that at all?
> 
> I can answer the first two questions. I talked to one of our Product
> Managers who was involved with this JEP and he said that we have
> permission to release these certificates as open source at OpenJDK (much
> as Mozilla has roots in Firefox).  Therefore there should be no concerns
> using with OpenJDK 8 or other versions for that matter.  If you mean the
> jdk8u project specifically, you should check with the current
> maintainers for interest in this as I think they currently use other
> means for their builds.

Thank you for responding. So I'll check with the jdk8u project whether there's interest in this.

Best regards
Christoph



More information about the security-dev mailing list