RFR: 8320362: Load anchor certificates from Keychain keystore [v5]

Alexey Bakhtin abakhtin at openjdk.org
Fri Feb 2 20:32:01 UTC 2024


On Fri, 2 Feb 2024 19:37:18 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

> Will KEYCHAINSTORE-ROOT contains trusted certs inside KEYCHAINSTORE? I tried on my machine and there are some items not in `security dump-trust-settings -s`.
`security dump-trust-settings -s` returns only predefined root certificates. KEYCHAINSTORE-ROOT additionally contains installed root trusted certificates in the system domain

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1924651647



More information about the security-dev mailing list