Re: [PATCH 0/3] icedtea: Generate keystore.

[Roel Janssen]

Ricardo Wurmus writes:

> Hi Guix,
>
> our current IcedTea packages don't have TLS/SSL support as they don't come
> with a certificate store.  In the Java world we need to import certificates
> into a keystore.  (This is, unfortunately, not reproducible.)
>
> These there patches add a build phase to icedtea-6 to generate a keystore from
> the certificates in the nss-certs package.  I've tested this with the Java
> bindings for git and an HTTPS URL of a repository.
>
> For some reason generating a keystore fails with icedtea-8, so I'm explicitly
> deleting the build phase there.  I'm not sure why this happens.
>
> Overall I think this is an improvement, but more work is needed here.
>
> What do you think?

I haven't looked at the patches, but I would like to say that I have run
into the missing certificates with Java.  I haven't looked at whether
this resolves the problem either, but I would like to thank you for your
work in this area.

I really appreciate your work on IcedTea and Java packages.

Thanks,
Roel