git: openjdk/jdk21u-dev: master: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Andrew John Hughes]

Changeset: eb824722
Branch: master
Author:    Antonio Vieiro <avieirov at redhat.com>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2025-02-12 02:05:45 +0000
URL:       https://git.openjdk.org/jdk21u-dev/commit/eb824722c053608b779d3b8959ba218aceed6875

8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Reviewed-by: andrew
Backport-of: d2262fe4e9b3118d4c4ab152aa2771b744398367

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/CamerfirmaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Camerfirma.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachamberscommerceca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersignca-chain.pem