RFR: 8320362: Load anchor certificates from Keychain keystore [v10]

[Alexey Bakhtin]

> Please review the proposed fix.
> 
> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
> It allows to build a trusted certificate path using the MacOS Keychain store only.

Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:

  Add HttpsURLConnectionTest into jdk_security_infra test group

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/16722/files
  - new: https://git.openjdk.org/jdk/pull/16722/files/e2237c72..b92e21b9

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=16722&range=09
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=16722&range=08-09

  Stats: 1 line in 1 file changed: 0 ins; 0 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/16722.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/16722/head:pull/16722

PR: https://git.openjdk.org/jdk/pull/16722