git: openjdk/jdk17u-dev: 8361212: Remove AffirmTrust root CAs

Goetz Lindenmaier goetz at openjdk.org
Fri Aug 8 09:41:02 UTC 2025


Changeset: d21c6cf5
Branch: master
Author:    Goetz Lindenmaier <goetz at openjdk.org>
Date:      2025-08-08 09:39:20 +0000
URL:       https://git.openjdk.org/jdk17u-dev/commit/d21c6cf5986b699ec56922ebc109e176cf56733e

8361212: Remove AffirmTrust root CAs

Reviewed-by: mbaesken
Backport-of: 3bdac5317815b84d6f693d972f73d77dd069a891

- make/data/cacerts/affirmtrustcommercialca
- make/data/cacerts/affirmtrustnetworkingca
- make/data/cacerts/affirmtrustpremiumca
- make/data/cacerts/affirmtrustpremiumeccca
! src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
! test/jdk/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
! test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Entrust.java
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustcommercialca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustnetworkingca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustpremiumca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustpremiumeccca-chain.pem



More information about the jdk-updates-changes mailing list