Java cacerts should be symlinked to JRE

Makefile

 all:
 	curl -s -k -O https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
 	install -vm755 make-ca.sh-20170514 /usr/sbin/make-ca.sh
-	/usr/sbin/make-ca.sh -c /etc/ssl/ca-bundle.pem
+	/usr/sbin/make-ca.sh
 	rm certdata.txt
+
+java: all
+	rm -f /opt/jdk/jre/lib/security/cacerts
+	ln -svf /etc/ssl/java/cacerts /opt/jdk/jre/lib/security/cacerts