git: openjdk/jdk: jdk26: 8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA

[Mark Powers]

Changeset: 17351930
Branch: jdk26
Author:    Mark Powers <mpowers at openjdk.org>
Date:      2026-01-13 18:11:40 +0000
URL:       https://git.openjdk.org/jdk/commit/17351930ac0cb93fdd222489041a60de7cf9e1ef

8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA

Reviewed-by: mullan
Backport-of: 92abc6dfe43a2c1f10dcfcf1e197fc9369f70ee3

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/ChunghwaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Chunghwa.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/chunghwa/chunghwaepkirootca-chain.pem