git: openjdk/jdk11u-dev: 8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA

Thu Feb 19 10:04:41 UTC 2026

Changeset: 53b96173
Branch: master
Author:    David Sladký <sladky.david at proton.me>
Committer: Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2026-02-19 10:03:17 +0000
URL:       https://git.openjdk.org/jdk11u-dev/commit/53b9617326389588780a560799444f170175df8d

8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA

Reviewed-by: sgehwolf, andrew
Backport-of: e47690176cade6a6f8cf97059cfe914f5f67cd87

! src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
+ src/java.base/share/classes/sun/security/validator/ChunghwaTLSPolicy.java
! src/java.base/share/conf/security/java.security
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Chunghwa.java
+ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/chains/chunghwa/chunghwaepkirootca-chain.pem