git: openjdk/jdk11u-dev: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Severin Gehwolf]

Changeset: 8322c66e
Branch: master
Author:    Antonio Vieiro <avieirov at redhat.com>
Committer: Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2025-02-14 16:21:20 +0000
URL:       https://git.openjdk.org/jdk11u-dev/commit/8322c66efa9da9210eca7d6081d2a8c2d65ba4e0

8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Reviewed-by: sgehwolf
Backport-of: f4bef2f24a9bb433b5693aa59bb81acac6b311f3

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/CamerfirmaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Camerfirma.java
! test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Distrust.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachamberscommerceca-chain.pem
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersignca-chain.pem