Please review the code change and CSR at webrev: http://cr.openjdk.java.net/~weijun/8076190/webrev.01/ CSR: https://bugs.openjdk.java.net/browse/JDK-8202590
The bug is at https://bugs.openjdk.java.net/browse/JDK-8076190 This is the 1st part of the process to make cacerts using pkcs12: 1. Support passwordless access to PKCS12 keystores 2. Update default algorithms and params when creating a PKCS12 keystore 3. Update keytool to support passwordless pkcs12 keystores 4. Migrate cacerts to pkcs12 Thanks Max
