RFR: 8275252: Migrate cacerts from JKS to password-less PKCS12

Michael Osipov duke at openjdk.java.net
Thu Oct 14 19:10:50 UTC 2021


On Thu, 14 Oct 2021 17:31:26 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> 
> 
> If you look into the code change for `make/ToolsJdk.gmk`, you can see 2 system properties used while generating the new cacerts file. With them, the new file becomes password-less.

This I have seen, but what about:
* Generating this trust store with Java code like I do?
* Will this solve the two mentioned tickets?

-------------

PR: https://git.openjdk.java.net/jdk/pull/5948


More information about the security-dev mailing list