git: openjdk/jdk11u-dev: 8361212: Remove AffirmTrust root CAs

Antonio Vieiro avieiro at openjdk.org
Wed Aug 27 09:40:16 UTC 2025


Changeset: 5173435b
Branch: master
Author:    Antonio Vieiro <avieiro at openjdk.org>
Date:      2025-08-27 09:38:15 +0000
URL:       https://git.openjdk.org/jdk11u-dev/commit/5173435bfd0db5db0113a6209f2f827b16598596

8361212: Remove AffirmTrust root CAs

Reviewed-by: sgehwolf
Backport-of: d21c6cf5986b699ec56922ebc109e176cf56733e

- make/data/cacerts/affirmtrustcommercialca
- make/data/cacerts/affirmtrustnetworkingca
- make/data/cacerts/affirmtrustpremiumca
- make/data/cacerts/affirmtrustpremiumeccca
! src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
! test/jdk/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
! test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Entrust.java
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustcommercialca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustnetworkingca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustpremiumca-chain.pem
- test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/entrust/affirmtrustpremiumeccca-chain.pem



More information about the jdk-updates-changes mailing list