git: openjdk/jdk24u: master: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Andrew Dinn]

Changeset: d2262fe4
Branch: master
Author:    Antonio Vieiro <avieirov at redhat.com>
Committer: Andrew Dinn <adinn at openjdk.org>
Date:      2025-02-06 09:05:06 +0000
URL:       https://git.openjdk.org/jdk24u/commit/d2262fe4e9b3118d4c4ab152aa2771b744398367

8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Backport-of: 907350e9e8e9b66365e9eaa3ae89ddc55cf9731f

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/CamerfirmaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Camerfirma.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachamberscommerceca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersignca-chain.pem