RFR [backport to jdk and 11u]: 8216577: Add GlobalSign's R6 Root certificate

[Langer, Christoph]

Thank you, Rajan.

From: Rajan Halade <rajan.halade at oracle.com>
Sent: Dienstag, 30. April 2019 20:08
To: Langer, Christoph <christoph.langer at sap.com>
Cc: security-dev at openjdk.java.net; jdk-updates-dev at openjdk.java.net; Sean Mullan <sean.mullan at oracle.com>
Subject: Re: RFR [backport to jdk and 11u]: 8216577: Add GlobalSign's R6 Root certificate

Thanks Christoph for this. I have pushed fix to jdk/jdk repository.

- Rajan
On 4/29/19 12:31 AM, Langer, Christoph wrote:
Hi,

the change to add GlobalSign's R6 Root certificate has only been pushed to jdk12 updates (12.0.1) so far. According to [0], it was an oversight to not have it added to jdk/jdk. I also want to bring it to 11u.

Taking the change to both, jdk/jdk and jdk-updates/jdk11u-dev does not apply cleanly. test/jdk/sun/security/lib/cacerts/VerifyCACerts.java fails to resolve because of changed license header and different bug ids in the @bug tag. So, please review the resolved change. It's the same for both repos.

Webrev jdk/jdk: http://cr.openjdk.java.net/~clanger/webrevs/8216577.jdk/
Webrev jdk11u-dev: http://cr.openjdk.java.net/~clanger/webrevs/8216577.jdk11u-dev/
Bug: https://bugs.openjdk.java.net/browse/JDK-8216577

Please review.

@Rajan Halade<mailto:rajan.halade at oracle.com>: please let me know whether I shall push it to jdk/jdk or feel free to do it yourself.

Thanks & Best regards
Christoph

[0] https://mail.openjdk.java.net/pipermail/security-dev/2019-April/019766.html