git: openjdk/jdk21u-dev: master: 8361212: Remove AffirmTrust root CAs

[Goetz Lindenmaier]

Changeset: d90297a8
Branch: master
Author:    Goetz Lindenmaier <goetz at openjdk.org>
Date:      2025-08-08 09:36:50 +0000
URL:       https://git.openjdk.org/jdk21u-dev/commit/d90297a828dff468afc34e2767439e51379f4f95

8361212: Remove AffirmTrust root CAs

Backport-of: 3bdac5317815b84d6f693d972f73d77dd069a891

! src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
- src/java.base/share/data/cacerts/affirmtrustcommercialca
- src/java.base/share/data/cacerts/affirmtrustnetworkingca
- src/java.base/share/data/cacerts/affirmtrustpremiumca
- src/java.base/share/data/cacerts/affirmtrustpremiumeccca
! test/jdk/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
! test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Entrust.java
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustcommercialca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustnetworkingca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustpremiumca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustpremiumeccca-chain.pem