RFR: 8320362: Load anchor certificates from Keychain keystore

[Weijun Wang]

On Sat, 18 Nov 2023 02:41:05 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

> Please review the proposed fix.
> 
> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
> It allows to build a trusted certificate path using the MacOS Keychain store only.

How about putting these certs into a different keystore? Anyway, there needs a CSR and release note for this big change.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1819099471