CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/10/25 08:40:26
Modified files:
security/jdk-ca-certs: Makefile
Added files:
security/jdk-ca-certs: distinfo
Log message:
jdk-ca-cert: switch to a custom conversion utility, replacing OpenSSL
The format of jdk-cacerts produced by kirill's eopenssl40 contraption is
a very simple PKCS#12 file (as far as anything involving PKCS#12 can be
called simple) with an oracle-specific attribute in each of its certBags.
Build a custom tool I wrote for this because serializing correct ASN.1
by hand is way easier than using and extending the OpenSSL PKCS12 API,
which is what we would need to do if we extended the openssl pkcs12 cli.
It's also far less scary.
ok kurt
