[jdk11u-dev] RFR: 8316138: Add GlobalSign 2 TLS root certificates

[Severin Gehwolf]

On Fri, 17 May 2024 13:41:43 GMT, María Arias de Reyna <duke at openjdk.org> wrote:

> Backport for https://bugs.openjdk.org/browse/JDK-8316138
> 
> Related to https://github.com/openjdk/jdk21u-dev/pull/581 and https://github.com/openjdk/jdk17u-dev/pull/2479
> 
> Changes since the original commit: the checksum for the certificates and the folder where the certs are stored.
> 
> 
> ]$ make run-test TEST="test/jdk/sun/security/lib/cacerts/VerifyCACerts.java"
> Building target 'run-test' in configuration 'linux-x86_64-normal-server-release'
> Skip building of Graal unit tests because 3rd party libraries directory is not specified
> Skip building of Graal unit tests because 3rd party libraries directory is not specified
> Creating jdk image
> Test selection 'test/jdk/sun/security/lib/cacerts/VerifyCACerts.java', will run:
> * jtreg:test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
> 
> Running test 'jtreg:test/jdk/sun/security/lib/cacerts/VerifyCACerts.java'
> Passed: sun/security/lib/cacerts/VerifyCACerts.java
> Test results: passed: 1
> Report written to /home/delawen/git/jdk11u-dev/build/linux-x86_64-normal-server-release/test-results/jtreg_test_jdk_sun_security_lib_cacerts_VerifyCACerts_java/html/report.html
> Results written to /home/delawen/git/jdk11u-dev/build/linux-x86_64-normal-server-release/test-support/jtreg_test_jdk_sun_security_lib_cacerts_VerifyCACerts_java
> Finished running test 'jtreg:test/jdk/sun/security/lib/cacerts/VerifyCACerts.java'
> Test report is stored in build/linux-x86_64-normal-server-release/test-results/jtreg_test_jdk_sun_security_lib_cacerts_VerifyCACerts_java
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk/sun/security/lib/cacerts/VerifyCACerts.java
>                                                          1     1     0     0   
> ==============================
> TEST SUCCESS
> 
> Finished building target 'run-test' in configuration 'linux-x86_64-normal-server-release'

test/jdk/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java line 659:

> 657:             case "globalsignr46" ->
> 658:                     new CATestURLs("https://valid.r46.roots.globalsign.com",
> 659:                             "https://revoked.r46.roots.globalsign.com");

Does this compile? Switch expressions are JDK 14+.

-------------

PR Review Comment: https://git.openjdk.org/jdk11u-dev/pull/2715#discussion_r1605097245