RFR: 8320362: Load anchor certificates from Keychain keystore [v3]
Weijun Wang
weijun at openjdk.org
Thu Jan 4 16:59:24 UTC 2024
On Thu, 4 Jan 2024 02:24:56 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:
>> Please review the proposed fix.
>>
>> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
>> It allows to build a trusted certificate path using the MacOS Keychain store only.
>
> Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:
>
> Add KeychainStore-ROOT keystore for root certificates
What are the change for existing `addCertificatesToKeystore` for? Is there any behavior change?
-------------
PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1877444731
More information about the security-dev
mailing list