8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options

GoeLin · GoeLin · commit 3b2b321939a9 · 2024-09-26T11:31:53.000Z
Backport-of: c9bee173d61f4accfc4adc280ab5d21600191756
diff --git a/src/java.base/share/classes/sun/security/tools/keytool/Main.java b/src/java.base/share/classes/sun/security/tools/keytool/Main.java
@@ -1119,7 +1119,6 @@ && isKeyStoreRelated(command)
             }
         }
 
-        KeyStore cakstore = buildTrustedCerts();
         // -trustcacerts can be specified on -importcert, -printcert or -printcrl.
         // Reset it so that warnings on CA cert will remain for other command.
         if (command != IMPORTCERT && command != PRINTCERT
@@ -1128,6 +1127,7 @@ && isKeyStoreRelated(command)
         }
 
         if (trustcacerts) {
+            KeyStore cakstore = buildTrustedCerts();
             if (cakstore != null) {
                 caks = cakstore;
             } else {

Original file line number	Diff line number	Diff line change
`@@ -1119,7 +1119,6 @@ && isKeyStoreRelated(command)`
`1119`	`1119`	`}`
`1120`	`1120`	`}`
`1121`	`1121`
`1122`		`- KeyStore cakstore = buildTrustedCerts();`
`1123`	`1122`	`// -trustcacerts can be specified on -importcert, -printcert or -printcrl.`
`1124`	`1123`	`// Reset it so that warnings on CA cert will remain for other command.`
`1125`	`1124`	`if (command != IMPORTCERT && command != PRINTCERT`
`@@ -1128,6 +1127,7 @@ && isKeyStoreRelated(command)`
`1128`	`1127`	`}`
`1129`	`1128`
`1130`	`1129`	`if (trustcacerts) {`
	`1130`	`+ KeyStore cakstore = buildTrustedCerts();`
`1131`	`1131`	`if (cakstore != null) {`
`1132`	`1132`	`caks = cakstore;`
`1133`	`1133`	`} else {`