Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-11 Thread Weijun Wang
> On Dec 8, 2017, at 10:45 PM, Volker Simonis wrote: > > OK, I've opened the RFR "JDK-8193255: Root Certificates should be > stored in text format and assembled at build time" for this issue. In fact, I would recommend we directly release cacerts as a text file containing PEM certificates, fo

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-08 Thread Rajan Halade
On 12/8/17 8:15 PM, Volker Simonis wrote: OK, I've opened the RFR "JDK-8193255: Root Certificates should be stored in text format and assembled at build time" for this issue. I've also put some information about how the AdoptOpenJDK builds their cacerts JKS file from the Mozilla certdata.txt dat

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-08 Thread Volker Simonis
On Tue, Dec 5, 2017 at 7:55 PM, Magnus Ihse Bursie wrote: > > On 2017-12-05 18:33, Sean Mullan wrote: >> >> On 12/5/17 12:01 PM, Volker Simonis wrote: >>> >>> Hi Rajan, >>> >>> 'cacerts' is a binary file and I thought we have at least the >>> convention in the OpenJDK project that we don't want to

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Magnus Ihse Bursie
On 2017-12-05 18:33, Sean Mullan wrote: On 12/5/17 12:01 PM, Volker Simonis wrote: Hi Rajan, 'cacerts' is a binary file and I thought we have at least the convention in the OpenJDK project that we don't want to check in binary artefact's if possible. One problem with 'cacerts' being a binary

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Sean Mullan
On 12/5/17 12:01 PM, Volker Simonis wrote: Hi Rajan, 'cacerts' is a binary file and I thought we have at least the convention in the OpenJDK project that we don't want to check in binary artefact's if possible. One problem with 'cacerts' being a binary file is that we can not add a license and

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Volker Simonis
Hi Rajan, 'cacerts' is a binary file and I thought we have at least the convention in the OpenJDK project that we don't want to check in binary artefact's if possible. One problem with 'cacerts' being a binary file is that we can not add a license and copyright to it. Another one is that it is ha

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread dalibor topic
On 05.12.2017 10:08, Magnus Ihse Bursie wrote: I think the folks from the AdoptOpenJDK project are using this option (CC-ed adoption-discuss). I'm not sure if they want to drop their root certificates in favor of the new ones. Maybe they can upstream their root certs as well, if it seems prude

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Magnus Ihse Bursie
On 2017-12-05 10:25, Volker Simonis wrote: On Tue, Dec 5, 2017 at 10:08 AM, Magnus Ihse Bursie wrote: On 2017-12-05 09:44, Volker Simonis wrote: On Tue, Dec 5, 2017 at 9:19 AM, Magnus Ihse Bursie wrote: On 2017-12-01 18:16, Volker Simonis wrote: Hi Rajan, great to see this finally happen!

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Volker Simonis
On Tue, Dec 5, 2017 at 10:08 AM, Magnus Ihse Bursie wrote: > On 2017-12-05 09:44, Volker Simonis wrote: >> >> On Tue, Dec 5, 2017 at 9:19 AM, Magnus Ihse Bursie >> wrote: >>> >>> On 2017-12-01 18:16, Volker Simonis wrote: Hi Rajan, great to see this finally happen! I

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Magnus Ihse Bursie
On 2017-12-05 09:44, Volker Simonis wrote: On Tue, Dec 5, 2017 at 9:19 AM, Magnus Ihse Bursie wrote: On 2017-12-01 18:16, Volker Simonis wrote: Hi Rajan, great to see this finally happen! I have just a quick question related to the tests. As far as I can see, the tests will only succeed if t

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Volker Simonis
On Tue, Dec 5, 2017 at 9:19 AM, Magnus Ihse Bursie wrote: > On 2017-12-01 18:16, Volker Simonis wrote: >> >> Hi Rajan, >> >> great to see this finally happen! >> >> I have just a quick question related to the tests. As far as I can >> see, the tests will only succeed if the OpenJDK will be build w

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-05 Thread Magnus Ihse Bursie
On 2017-12-01 18:16, Volker Simonis wrote: Hi Rajan, great to see this finally happen! I have just a quick question related to the tests. As far as I can see, the tests will only succeed if the OpenJDK will be build with the new open sourced, Oracle root certificates. But what if somebody is bu