[11u] RFR: 8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs

[Severin Gehwolf]

Hi Christoph,

Hi Christoph,

On Sat, 2020-12-19 at 06:21 +0000, Langer, Christoph wrote:
> Hi Severin,
> 
> thanks for doing this backport, it looks correct.

Thanks for the review!

> JDK-8243559 is planned by Oracle for the April update but we should
> only backport it once Oracle has done so, as well. So I agree, we
> need to now backport 8225072 with manual reshuffling and later on
> 8243559.
> 
> As the test is failing in 11.0.10 as well, since it is time based,
> and it is in tier1, please push to 11.0.10 (11u). I'll approve this
> immediately once you've tagged it...

Tagged both bugs:
https://bugs.openjdk.java.net/browse/JDK-8225072
https://bugs.openjdk.java.net/browse/JDK-8258630

Thanks,
Severin


> > -----Original Message-----
> > From: jdk-updates-dev <jdk-updates-dev-retn at openjdk.java.net> On
> > Behalf Of Severin Gehwolf
> > Sent: Freitag, 18. Dezember 2020 18:31
> > To: jdk-updates-dev <jdk-updates-dev at openjdk.java.net>
> > Subject: [11u] RFR: 8225072: Add LuxTrust certificate that is
> > expiring in March
> > 2021 to list of allowed but expired certs
> > 
> > Please review this test-only backport which adds QuoVadis and
> > LuxTrust
> > certificate to the allowed but soon-to-expire list. The JDK 17
> > patch
> > didn't apply cleanly since 11 is missing JDK-8243559. It's not
> > clear at
> > this point when we'll include it in JDK 11. I've ported the changes
> > manually.
> > 
> > The patch will resolve 11 backports for both JDK-8225072 and JDK-
> > 8258630.
> > 
> > Bug(s): https://bugs.openjdk.java.net/browse/JDK-8225072
> >         https://bugs.openjdk.java.net/browse/JDK-8258630
> > webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-
> > 8225072/01/webrev/
> > 
> > Testing: VerifyCACerts test fails before and passes after.
> > 
> > Thoughts?
> > 
> > Thanks,
> > Severin
>