Comment 14 for bug 157721

I can confirm that openjdk looks for the ca bundle in /etc/pki/tls/certs/ca-bundle.crt (see patches/icedtea-certbundle.patch). It should look in /etc/ssl/certs/ca-certificates.crt instead, I believe. Mind you, it doesn't fix this bug, but we seem to get a bit further. With my bank (Sparnord) I get some java.security.AccessControlException that prevent me from getting any further. I'm sure I could policytool my way out of it, but I've no clue how to drive that thing. Shouldn't it be showing me a helpful dialog window asking if I'm cool with it reading my files?