git: openjdk/jdk17u: 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

[Goetz Lindenmaier]

Changeset: aa46c353
Branch: master
Author:    Goetz Lindenmaier <goetz at openjdk.org>
Date:      2024-09-08 12:35:23 +0000
URL:       https://git.openjdk.org/jdk17u/commit/aa46c353c7a9e2fea91599395fe9466387c83541

8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

Backport-of: 7d49c52272b54070a13b02708dd7ce5f8e375a06

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustcommercialca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustnetworkingca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustpremiumca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustpremiumeccca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrust2048ca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustevca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcaec1-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcag2-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcag4-chain.pem