JDK 28 adds a new jlink plugin that lets developers specify which CA certificates to include in the cacerts keystore when building a custom Java runtime image. This enables leaner, more targeted runtimes containing only the certificates required by the target application. The syntax accepts one or more cacerts keystore aliases as comma-separated values via the --cacerts flag.
38.2K Impressions1 Comment