RFR: 8278080: Add --with-cacerts-src='user cacerts folder' to enable deterministic cacerts generation [v2]

Erik Joelsson erikj at openjdk.java.net
Thu Dec 2 18:49:18 UTC 2021


On Thu, 2 Dec 2021 18:03:50 GMT, Andrew Leonard <aleonard at openjdk.org> wrote:

>> my assumption was the recipe gets resolved later
>
> this was my understanding: https://www.gnu.org/software/make/manual/html_node/Variables-in-Recipes.html
> 
> This occurs after make has finished reading all the makefiles and the target is determined to be out of date; so, the recipes for targets which are not rebuilt are never expanded. 
> 
> but i'm going to double check I was checking the resultant cacerts correctly in my tests

Oh, I didn't expand the diff far enough to actually see the context correctly when I reviewed this as I would never have imagined the conditional to be placed after the rule. While this will work as so far as using the correct files, incremental builds will not be correct, because the rules are defined in the first pass.

I very much agree with Magnus that this conditional belongs around line 63.

-------------

PR: https://git.openjdk.java.net/jdk/pull/6647


More information about the security-dev mailing list