RFR 8193255: Root Certificates should be stored in text format and assembled at build time

Weijun Wang weijun.wang at oracle.com
Thu May 30 15:32:24 UTC 2019



> On May 30, 2019, at 10:01 PM, Erik Joelsson <erik.joelsson at oracle.com> wrote:
> 
> In my experience, using directories for dependencies in make does not work well. Since all the files in make/data/cacerts are in a flat structure, I would recommend expressing the prerequisites as:
> 
> $(wildcard $(GENDATA_CACERTS_SRC)/*)
> 
> This will not cover the case where a file is removed, but that case is rarely handled well in make based build systems.

But in my experiment, using the directory name does detect the file removal.

Or, can I list *both* the files and the directory to get maximum awareness?

--Max



More information about the security-dev mailing list