git: openjdk/jdk21u-dev: master: 8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA

[Goetz Lindenmaier]

Changeset: cabfc7ab
Branch: master
Author:    Goetz Lindenmaier <goetz at openjdk.org>
Date:      2026-02-17 10:18:47 +0000
URL:       https://git.openjdk.org/jdk21u-dev/commit/cabfc7ab8d5d127000331818c40b01558fed26fd

8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA

Backport-of: 92abc6dfe43a2c1f10dcfcf1e197fc9369f70ee3

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/ChunghwaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Chunghwa.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/chunghwa/chunghwaepkirootca-chain.pem