On 22/11/2017 13:23, Sean Mullan wrote:
Please review a new JEP Draft titled "Open-Source the Root
Certificates". The JDK source code currently contains an empty cacerts
keystore, which prevents security components such as TLS from working
out-of-the-box on OpenJDK builds.
The goal of this JEP is to provide a default set of root certificates
in the JDK, in order to reduce the differences between the OpenJDK and
Oracle JDK builds.
http://cr.openjdk.java.net/~mullan/jeps/8191486.html
It can be served up as a JEP draft too:
http://openjdk.java.net/jeps/8191486
-Alan