hg: jdk/jdk: 8207258: Distrust TLS server certificates anchored by Symantec Root CAs

[sean.mullan at oracle.com]

Changeset: 04c9b7111aac
Author:    mullan
Date:      2018-12-11 13:22 -0500
URL:       http://hg.openjdk.java.net/jdk/jdk/rev/04c9b7111aac

8207258: Distrust TLS server certificates anchored by Symantec Root CAs
Reviewed-by: weijun

+ src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
! src/java.base/share/classes/sun/security/validator/EndEntityChecker.java
+ src/java.base/share/classes/sun/security/validator/SymantecTLSPolicy.java
! src/java.base/share/classes/sun/security/validator/Validator.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/geotrustglobalca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/geotrustprimarycag2-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/geotrustprimarycag3-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/geotrustuniversalca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/thawteprimaryrootca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/thawteprimaryrootcag2-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/thawteprimaryrootcag3-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/verisignclass3g3ca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/verisignclass3g4ca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/verisignclass3g5ca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/verisignclass3g5ca-codesigning-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Symantec/verisignuniversalrootca-chain.pem
+ test/lib/jdk/test/lib/security/SecurityUtils.java