RFR: 8320362: Load anchor certificates from Keychain keystore [v4]

Weijun Wang weijun at openjdk.org
Wed Jan 31 15:36:05 UTC 2024


On Thu, 25 Jan 2024 22:01:48 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

>> Please review the proposed fix.
>> 
>> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
>> It allows to build a trusted certificate path using the MacOS Keychain store only.
>
> Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Reuse code from addCertificatesToKeystore

Do you intend to call `addIdentitiesToKeystore` for both store types?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/16722#issuecomment-1919350099



More information about the security-dev mailing list