On 10/8/2014 10:53 AM, Wang Weijun wrote: > > On Oct 8, 2014, at 10:43, Xuelei Fan <xuelei....@oracle.com> wrote: > >> I think Keytool should be independent of JSSE. > > Yes. > > However, I can think of adding a new system property called > "jdk.keytool.cacerts" so that people can point it to a file not > jre/lib/security/cacerts. This would be useful for the bug reporter and we > can now finally testing the -trustcacerts option. > If I'm correct, the cacerts can be specified in command line. Considering we have had the command line option, the benefit of adding a new system property may be limited.
Xuelei