On Tue, 19 Oct 2021 19:48:23 GMT, Weijun Wang <wei...@openjdk.org> wrote:

>> The cacerts file is now a password-less PKCS12 file. This make sure old code 
>> that uses a JKS KeyStore object can continuously load it using a null 
>> password (in fact, any password) and see all certificates inside.
>
> Weijun Wang has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   use a standard name

Marked as reviewed by mullan (Reviewer).

make/jdk/src/classes/build/tools/generatecacerts/GenerateCacerts.java line 54:

> 52:     public static void store(String dir, OutputStream stream) throws 
> Exception {
> 53: 
> 54:         CertificateFactory cf = CertificateFactory.getInstance("X509");

Nit: better to use the standard name here: "X.509".

-------------

PR: https://git.openjdk.java.net/jdk/pull/5948

Reply via email to