RFR: 8320362: Load anchor certificates from Keychain keystore [v5]

Alexey Bakhtin abakhtin at openjdk.org
Fri Feb 2 19:40:03 UTC 2024


On Thu, 1 Feb 2024 21:36:51 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Will KEYCHAINSTORE-ROOT contains trusted certs inside KEYCHAINSTORE? I tried on my machine and there are some items not in `security dump-trust-settings -s`.

I've found an issue in the original implementation that prevents adding different certificates with the same CN. I am going to fix it as part of this PR because it affects the scope of root certificates in the KEYCHAINSTORE-ROOT

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1924560154



More information about the security-dev mailing list