Sync Openfire's truststore with Mozilla's shipped CAs
Description
Need to include letsencrypt CA to support letsencrypt usage by Openfire
Openfire's distributed truststore already has "dst_root_ca_x3", so I have taken the liberty to hijack this ticket to be more general "update truststore" to match what Mozilla provides
Environment
Acceptance Test - Entry
Activity
dwd's previous commit may just need to be repeated then. I don't have immediate access to the same directory structure
https://github.com/igniterealtime/Openfire/commit/73b591064501533c69961cb6bc534bdcdc736264
See also
FYI - as of JDK/JRE 8u102 - letsencrypt upstream CA is included in the default trust store.
So I don't think the latest debian ca-certificates package has letsencrypt CA included, so dwd's approach above won't work in this case (still would be worth doing though). Anyway, while JRE 8 now includes this, openfire does not use it, but provides it own local truststore.
Looks like debian is awaiting this https://bugzilla.mozilla.org/show_bug.cgi?id=1204656
