git: openjdk/jdk17u-dev: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Severin Gehwolf]

Changeset: f4bef2f2
Branch: master
Author:    Antonio Vieiro <avieirov at redhat.com>
Committer: Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2025-02-13 11:32:38 +0000
URL:       https://git.openjdk.org/jdk17u-dev/commit/f4bef2f24a9bb433b5693aa59bb81acac6b311f3

8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Backport-of: eb824722c053608b779d3b8959ba218aceed6875

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/CamerfirmaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Camerfirma.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachamberscommerceca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersignca-chain.pem