[jdk11u] Integrated: 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

[Goetz Lindenmaier]

On Thu, 5 Sep 2024 11:31:46 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

> I backport this for parity with 11.0.25-oracle.
> 
> src/java.base/share/classes/sun/security/validator/CADistrustPolicy.java
>  * Resolved Copyright
> src/java.base/share/classes/sun/security/validator/EntrustTLSPolicy.java
>  * Removed debug argument from getFingerprint() as "8270946: X509CertImpl.getFingerprint should not return the empty String" is not in 11.

This pull request has now been integrated.

Changeset: 90ad5b18
Author:    Goetz Lindenmaier <goetz at openjdk.org>
URL:       https://git.openjdk.org/jdk11u/commit/90ad5b18de314faca19e322bb21a4c33cec54785
Stats:     1103 lines in 13 files changed: 1101 ins; 0 del; 2 mod

8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

Reviewed-by: phh
Backport-of: 7d49c52272b54070a13b02708dd7ce5f8e375a06

-------------

PR: https://git.openjdk.org/jdk11u/pull/95