[11u] RFR: 8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs

[Langer, Christoph]

...and approved.

Cheers
Christoph

> -----Original Message-----
> From: Severin Gehwolf <sgehwolf at redhat.com>
> Sent: Montag, 21. Dezember 2020 09:57
> To: Langer, Christoph <christoph.langer at sap.com>; jdk-updates-dev <jdk-
> updates-dev at openjdk.java.net>
> Subject: Re: [11u] RFR: 8225072: Add LuxTrust certificate that is expiring in
> March 2021 to list of allowed but expired certs
> 
> Hi Christoph,
> 
> Hi Christoph,
> 
> On Sat, 2020-12-19 at 06:21 +0000, Langer, Christoph wrote:
> > Hi Severin,
> >
> > thanks for doing this backport, it looks correct.
> 
> Thanks for the review!
> 
> > JDK-8243559 is planned by Oracle for the April update but we should
> > only backport it once Oracle has done so, as well. So I agree, we
> > need to now backport 8225072 with manual reshuffling and later on
> > 8243559.
> >
> > As the test is failing in 11.0.10 as well, since it is time based,
> > and it is in tier1, please push to 11.0.10 (11u). I'll approve this
> > immediately once you've tagged it...
> 
> Tagged both bugs:
> https://bugs.openjdk.java.net/browse/JDK-8225072
> https://bugs.openjdk.java.net/browse/JDK-8258630
> 
> Thanks,
> Severin
> 
> 
> > > -----Original Message-----
> > > From: jdk-updates-dev <jdk-updates-dev-retn at openjdk.java.net> On
> > > Behalf Of Severin Gehwolf
> > > Sent: Freitag, 18. Dezember 2020 18:31
> > > To: jdk-updates-dev <jdk-updates-dev at openjdk.java.net>
> > > Subject: [11u] RFR: 8225072: Add LuxTrust certificate that is
> > > expiring in March
> > > 2021 to list of allowed but expired certs
> > >
> > > Please review this test-only backport which adds QuoVadis and
> > > LuxTrust
> > > certificate to the allowed but soon-to-expire list. The JDK 17
> > > patch
> > > didn't apply cleanly since 11 is missing JDK-8243559. It's not
> > > clear at
> > > this point when we'll include it in JDK 11. I've ported the changes
> > > manually.
> > >
> > > The patch will resolve 11 backports for both JDK-8225072 and JDK-
> > > 8258630.
> > >
> > > Bug(s): https://bugs.openjdk.java.net/browse/JDK-8225072
> > >         https://bugs.openjdk.java.net/browse/JDK-8258630
> > > webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-
> > > 8225072/01/webrev/
> > >
> > > Testing: VerifyCACerts test fails before and passes after.
> > >
> > > Thoughts?
> > >
> > > Thanks,
> > > Severin
> >
>