feedback on --enable-java-home

Fri Oct 31 01:24:00 GMT 2008

Hi,
On Wed, 2008年10月29日 at 19:44 +0100, Matthias Klose wrote:
> Andrew Haley schrieb:
> > Matthias Klose wrote:
> >> l) Should a cacerts file created by default? At least java-gcj-compat
> >> did include a generate-cacerts.pl script.
> > 
> > I'm not certain about this; perhaps not.
>> I did see that some apps which were using openjdk and couldn't find the file did
> give an error. iirc mjw did track this down to direct access to this file.

I wasn't the person that tracked it down (that was Tom F.) but the
conclusion is correct. Originally in IcedTea we included an enhanced
default KeyStore that directly provided the distro installed openssl CA
certificates through the provider written by Casey. But applications
wanted to open, read and modify the cacerts file directly (e.g.
glassfish, eclipse, etc.). See also:
http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=150#c5
Cheers,
Mark