[jdk11u-dev] RFR: 8361212: Remove AffirmTrust root CAs [v2]

Antonio Vieiro avieiro at openjdk.org
Tue Aug 26 17:31:55 UTC 2025


> Mostly clean backport of [JDK-8361212](https://bugs.openjdk.org/browse/JDK-8361212) that removes the AffirmTrust CAs, that  have been deactivated by Entrust but are not being transferred to Sectigo. Mostly clean but for some `switch` statements that are not expressions in 11. This is marked as `CPU25_10-critical-SQE-OK`.
> 
> Tested on Linux/x86_64 with tier1 tests and 
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk/sun/security                         659   659     0     0   
> ==============================
> TEST SUCCESS

Antonio Vieiro has updated the pull request incrementally with one additional commit since the last revision:

  Missing line in CAInterop.java
  
  Signed-off-by: Antonio Vieiro <avieirov at redhat.com>

-------------

Changes:
  - all: https://git.openjdk.org/jdk11u-dev/pull/3075/files
  - new: https://git.openjdk.org/jdk11u-dev/pull/3075/files/a7482d31..af20b429

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3075&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3075&range=00-01

  Stats: 1 line in 1 file changed: 1 ins; 0 del; 0 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/3075.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3075/head:pull/3075

PR: https://git.openjdk.org/jdk11u-dev/pull/3075


More information about the jdk-updates-dev mailing list