On Thu, 12 Feb 2026 18:12:34 GMT, Sean Mullan <[email protected]> wrote:
> This is a new `jlink` plugin which allows the user to specify the CA > certificates it wants to include in the `cacerts` keystore in a custom > runtime image. This can be very useful for creating runtimes that only > contain the CA certificates that are necessary. > > The command-line syntax takes one or more `cacert` keystore aliases as an > option, separated by a comma. > > For example: > > `jlink --cacerts "letsencryptisrgx1 [jdk]"` > > or > > `jlink --cacerts "letsencryptisrgx1 [jdk],digicertglobalrootca [jdk]"` > > --------- > - [x] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai). This pull request has now been integrated. Changeset: c289cf50 Author: Sean Mullan <[email protected]> URL: https://git.openjdk.org/jdk/commit/c289cf502c1f946aae863e71692a2fefeb891dee Stats: 262 lines in 5 files changed: 259 ins; 0 del; 3 mod 8377102: cacerts jlink plugin Reviewed-by: alanb ------------- PR: https://git.openjdk.org/jdk/pull/29700
