RFR: 8320362: Load anchor certificates from Keychain keystore [v2]

[1keep2keepFaith]

On Fri, 1 Dec 2023 23:39:55 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

>> Please review the proposed fix.
>> 
>> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
>> It allows to build a trusted certificate path using the MacOS Keychain store only.
>
> Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Mark trust anchor certificates readonly

Marked as reviewed by 1keep2keepFaith at github.com (no known OpenJDK username).

-------------

PR Review: https://git.openjdk.org/jdk/pull/16722#pullrequestreview-1760742271