[jdk17u-dev] RFR: 8321408: Add Certainly roots R1 and E1

Goetz Lindenmaier goetz at openjdk.org
Thu Feb 22 10:21:59 UTC 2024


On Wed, 21 Feb 2024 17:01:51 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

> Unclean backport to roll in two more root certificates and better parity.
> 
> I had to move the certificates in their proper places in 17u and regenerate the cacert checksum. (I am actually surprised we have to do this, but that must be because keystore type changed with [JDK-8275252](https://bugs.openjdk.org/browse/JDK-8275252))
> 
> Additional testing:
>  - [x] `jdk/security/infra sun/security/lib/cacerts` tests pass with new certificates

LGTM.
Yes, updating the hash is  a nuisance.

-------------

Marked as reviewed by goetz (Reviewer).

PR Review: https://git.openjdk.org/jdk17u-dev/pull/2217#pullrequestreview-1895464069


More information about the jdk-updates-dev mailing list