On Thu, 16 Apr 2026 22:48:00 GMT, Sean Mullan <[email protected]> wrote:

>> This is a new `jlink` plugin which allows the user to specify the CA 
>> certificates it wants to include in the `cacerts` keystore in a custom 
>> runtime image. This can be very useful for creating runtimes that only 
>> contain the CA certificates that are necessary.
>> 
>> The command-line syntax takes one or more `cacert` keystore aliases as an 
>> option, separated by a comma.
>> 
>> For example: 
>> 
>> `jlink --cacerts "letsencryptisrgx1 [jdk]"`
>> 
>> or
>> 
>> `jlink --cacerts "letsencryptisrgx1 [jdk],digicertglobalrootca [jdk]"`
>
> Sean Mullan has updated the pull request incrementally with two additional 
> commits since the last revision:
> 
>  - Adjust wording of the description for cacerts option.
>  - Rethrow PluginException as is.

Good feature. I've added myself as Reviewer to the CSR and added the 
"release-note=yes" label to the JBS issue to ensure that a RN is created for 
this addition.

-------------

Marked as reviewed by alanb (Reviewer).

PR Review: https://git.openjdk.org/jdk/pull/29700#pullrequestreview-4126768284

Reply via email to