From owner-freebsd-java@FreeBSD.ORG  Sat Feb 19 19:22:56 2005
Return-Path: <owner-freebsd-java@FreeBSD.ORG>
Delivered-To: freebsd-java@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4EC2316A4CE
	for <java@freebsd.org>; Sat, 19 Feb 2005 19:22:56 +0000 (GMT)
Received: from chen.org.nz (chen.org.nz [210.54.19.51])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E1FE343D5A
	for <java@freebsd.org>; Sat, 19 Feb 2005 19:22:55 +0000 (GMT)
	(envelope-from jonc@chen.org.nz)
Received: by chen.org.nz (Postfix, from userid 1000)
	id 9E6375647C; Sun, 20 Feb 2005 08:22:54 +1300 (NZDT)
Date: Sun, 20 Feb 2005 08:22:54 +1300
From: Jonathan Chen <jonc@chen.org.nz>
To: Alexey Zelkin <phantom@FreeBSD.org.ua>
Message-ID: <20050219192254.GA30667@osiris.chen.org.nz>
References: <20050219123658.F63417@fw.reifenberger.com>
	<20050219115556.GA20517@phantom.cris.net>
	<20050219140045.G63696@fw.reifenberger.com>
	<20050219132212.GA21028@phantom.cris.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050219132212.GA21028@phantom.cris.net>
User-Agent: Mutt/1.4.2.1i
cc: java@freebsd.org
cc: Michael Reifenberger <mike@reifenberger.com>
Subject: Re: Adding cacerts to jdk15
X-BeenThere: freebsd-java@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Porting Java to FreeBSD <freebsd-java.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-java>,
	<mailto:freebsd-java-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-java>
List-Post: <mailto:freebsd-java@freebsd.org>
List-Help: <mailto:freebsd-java-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-java>,
	<mailto:freebsd-java-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 19 Feb 2005 19:22:56 -0000

On Sat, Feb 19, 2005 at 03:22:12PM +0200, Alexey Zelkin wrote:

[...]
> We are not adding cacerts for jdk1[34], but *replacing* it (because
> of security problems).  JDK 1.5.0 was released *after* this problem
> was found and fixed, so jdk15 is distributing with valid cacerts
> file and there's no reason to do any manual interventions.

I have to agree with Micheal. The installed port on i386 comes back
with an empty cacerts file as well:

8:19am> ls -l /usr/local/jdk1.5.0/jre/lib/security/cacerts 
-rw-r--r--  1 root  wheel  32 Jan 25 22:53 /usr/local/jdk1.5.0/jre/lib/security/cacerts

-- 
Jonathan Chen <jonc@chen.org.nz>
----------------------------------------------------------------------
                         Power corrupts, Absolute Power is pretty neat