Please review the code changes at http://cr.openjdk.java.net/~weijun/8162739/webrev.00/
A new -cacerts option is added to keytool so there is no need to provide the full cacerts path on the command line. lib/security/cacerts is considered an implementation detail and subject to change.
The conf/security/cacerts file in src/ is moved to lib/security/cacerts, which matches its destination path. A small change in make/ is needed.
Thanks Max