git: openjdk/jdk: master: 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

[Mark Powers]

Changeset: bbb51616
Branch: master
Author:    Mark Powers <mpowers at openjdk.org>
Date:      2024-09-03 19:55:58 +0000
URL:       https://git.openjdk.org/jdk/commit/bbb516163d400a9c7e923e423fe2a60091b59322

8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

Reviewed-by: mullan, rhalade

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustcommercialca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustnetworkingca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustpremiumca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustpremiumeccca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrust2048ca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustevca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcaec1-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcag2-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcag4-chain.pem