OpenJDK and the cacerts

dalibor topic dalibor.topic at
Thu Aug 7 14:42:10 UTC 2014

Quoting from README-builds.html in the top level directory:


select the path to the cacerts file.

See for a better 
understanding of the Certificate Authority (CA). A certificates file 
named "cacerts" represents a system-wide keystore with CA certificates. 
In JDK and JRE binary bundles, the "cacerts" file contains root CA 
certificates from several public CAs (e.g., VeriSign, Thawte, and 
Baltimore). The source contain a cacerts file without CA root 
certificates. Formal JDK builders will need to secure permission from 
each public CA and include the certificates into their own custom 
cacerts file. Failure to provide a populated cacerts file will result in 
verification errors of a certificate chain during runtime. By default an 
empty cacerts file is provided and that should be fine for most JDK 

dalibor topic

On 07.08.2014 08:22, Richard Kolb wrote:
> Hello Adopt Discuss.
> I have taken to building my own OpenJDK for teaching Java. It really works
> well.
> I hit a problem with ssl connections and realized the OpenJDK 8 build I
> produced has an empty jre/lib/security/cacerts file.
> I have seen posts about this in the past but no real resolution.
> Where is the correct location to get or build a cacerts file for the
> OpenJDK?
> Not sure if it is in the vagrant script.
> Thanks,
> Richard.

<> Dalibor Topic | Principal Product Manager
Phone: +494089091214 <tel:+494089091214> | Mobile: +491737185961

ORACLE Deutschland B.V. & Co. KG | Kühnehöfe 5 | 22761 Hamburg

ORACLE Deutschland B.V. & Co. KG
Hauptverwaltung: Riesstr. 25, D-80992 München
Registergericht: Amtsgericht München, HRA 95603
Geschäftsführer: Jürgen Kunz

Komplementärin: ORACLE Deutschland Verwaltung B.V.
Hertogswetering 163/167, 3543 AS Utrecht, Niederlande
Handelsregister der Handelskammer Midden-Niederlande, Nr. 30143697
Geschäftsführer: Alexander van der Ven, Astrid Kepper, Val Maher

<> Oracle is committed to developing
practices and products that help protect the environment

More information about the adoption-discuss mailing list