RFR: 8275252: Migrate cacerts from JKS to password-less PKCS12

Weijun Wang weijun at openjdk.java.net
Thu Oct 14 13:44:00 UTC 2021


The cacerts file is now a password-less PKCS12 file. This make sure old code that uses a JKS KeyStore object can continuously load it using a null password (in fact, any password) and see all certificates inside.

-------------

Commit messages:
 - 8275252: Migrate cacerts from JKS to password-less PKCS12

Changes: https://git.openjdk.java.net/jdk/pull/5948/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=5948&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8275252
  Stats: 81 lines in 3 files changed: 2 ins; 69 del; 10 mod
  Patch: https://git.openjdk.java.net/jdk/pull/5948.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/5948/head:pull/5948

PR: https://git.openjdk.java.net/jdk/pull/5948


More information about the security-dev mailing list