RFR: 8320362: Load anchor certificates from Keychain keystore [v3]

Weijun Wang weijun at openjdk.org
Thu Jan 4 16:59:24 UTC 2024


On Thu, 4 Jan 2024 02:24:56 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

>> Please review the proposed fix.
>> 
>> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
>> It allows to build a trusted certificate path using the MacOS Keychain store only.
>
> Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Add KeychainStore-ROOT keystore for root certificates

What are the change for existing `addCertificatesToKeystore` for? Is there any behavior change?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1877444731



More information about the security-dev mailing list