[jdk11u-dev] RFR: 8361212: Remove AffirmTrust root CAs [v2]

[Severin Gehwolf]

On Tue, 26 Aug 2025 17:31:55 GMT, Antonio Vieiro <avieiro at openjdk.org> wrote:

>> Mostly clean backport of [JDK-8361212](https://bugs.openjdk.org/browse/JDK-8361212) that removes the AffirmTrust CAs, that  have been deactivated by Entrust but are not being transferred to Sectigo. Mostly clean but for some `switch` statements that are not expressions in 11. This is marked as `CPU25_10-critical-SQE-OK`.
>> 
>> Tested on Linux/x86_64 with tier1 tests and 
>> 
>> 
>> ==============================
>> Test summary
>> ==============================
>>    TEST                                              TOTAL  PASS  FAIL ERROR   
>>    jtreg:test/jdk/sun/security                         659   659     0     0   
>> ==============================
>> TEST SUCCESS
>
> Antonio Vieiro has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Missing line in CAInterop.java
>   
>   Signed-off-by: Antonio Vieiro <avieirov at redhat.com>

Looks good now.

-------------

Marked as reviewed by sgehwolf (Reviewer).

PR Review: https://git.openjdk.org/jdk11u-dev/pull/3075#pullrequestreview-3158894719