RFR: 8278080: Add --with-cacerts-src='user cacerts folder' to enable deterministic cacerts generation [v2]

Andrew Leonard aleonard at openjdk.java.net
Thu Dec 2 12:13:07 UTC 2021


On Wed, 1 Dec 2021 18:47:41 GMT, Erik Joelsson <erikj at openjdk.org> wrote:

>> Andrew Leonard has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains four additional commits since the last revision:
>> 
>>  - 8278080: Add --with-cacerts-src='user cacerts folder' to enable deterministic cacerts generation
>>    
>>    Signed-off-by: Andrew Leonard <anleonar at redhat.com>
>>  - Merge branch 'master' of https://github.com/openjdk/jdk into cacertssrc
>>  - 8278080: Add --with-cacerts-src='user cacerts folder' to enable determinsitic cacerts generation
>>    
>>    Signed-off-by: Andrew Leonard <anleonar at redhat.com>
>>  - 8278080: Add --with-cacerts-src='user cacerts folder' to enable determinsitic cacerts generation
>>    
>>    Signed-off-by: Andrew Leonard <anleonar at redhat.com>
>
> make/autoconf/jdk-options.m4 line 176:
> 
>> 174:       [specify alternative cacerts source folder containing certificates])])
>> 175:   AC_MSG_CHECKING([for cacerts source])
>> 176:   if test "x$with_cacerts_src" == x; then
> 
> Before this if block, please assign an empty value to CACERTS_SRC. Otherwise, if the user happens to have that variable set in the environment, that value will get recorded by configure, which is usually not something we want.

done

-------------

PR: https://git.openjdk.java.net/jdk/pull/6647


More information about the security-dev mailing list