RFR: 8320362: Load anchor certificates from Keychain keystore [v5]
Alexey Bakhtin
abakhtin at openjdk.org
Fri Feb 2 19:40:03 UTC 2024
On Thu, 1 Feb 2024 21:36:51 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> Will KEYCHAINSTORE-ROOT contains trusted certs inside KEYCHAINSTORE? I tried on my machine and there are some items not in `security dump-trust-settings -s`.
I've found an issue in the original implementation that prevents adding different certificates with the same CN. I am going to fix it as part of this PR because it affects the scope of root certificates in the KEYCHAINSTORE-ROOT
-------------
PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1924560154
More information about the security-dev
mailing list