[11u] RFR: 8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs

[Langer, Christoph]

Hi Severin,

thanks for doing this backport, it looks correct.

JDK-8243559 is planned by Oracle for the April update but we should only backport it once Oracle has done so, as well. So I agree, we need to now backport 8225072 with manual reshuffling and later on 8243559.

As the test is failing in 11.0.10 as well, since it is time based, and it is in tier1, please push to 11.0.10 (11u). I'll approve this immediately once you've tagged it...

Thanks
Christoph

> -----Original Message-----
> From: jdk-updates-dev <jdk-updates-dev-retn at openjdk.java.net> On
> Behalf Of Severin Gehwolf
> Sent: Freitag, 18. Dezember 2020 18:31
> To: jdk-updates-dev <jdk-updates-dev at openjdk.java.net>
> Subject: [11u] RFR: 8225072: Add LuxTrust certificate that is expiring in March
> 2021 to list of allowed but expired certs
> 
> Please review this test-only backport which adds QuoVadis and LuxTrust
> certificate to the allowed but soon-to-expire list. The JDK 17 patch
> didn't apply cleanly since 11 is missing JDK-8243559. It's not clear at
> this point when we'll include it in JDK 11. I've ported the changes
> manually.
> 
> The patch will resolve 11 backports for both JDK-8225072 and JDK-
> 8258630.
> 
> Bug(s): https://bugs.openjdk.java.net/browse/JDK-8225072
>         https://bugs.openjdk.java.net/browse/JDK-8258630
> webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-
> 8225072/01/webrev/
> 
> Testing: VerifyCACerts test fails before and passes after.
> 
> Thoughts?
> 
> Thanks,
> Severin