[jdk11u-dev] Integrated: 8361212: Remove AffirmTrust root CAs

[Antonio Vieiro]

On Mon, 25 Aug 2025 13:01:54 GMT, Antonio Vieiro <avieiro at openjdk.org> wrote:

> Mostly clean backport of [JDK-8361212](https://bugs.openjdk.org/browse/JDK-8361212) that removes the AffirmTrust CAs, that  have been deactivated by Entrust but are not being transferred to Sectigo. Mostly clean but for some `switch` statements that are not expressions in 11. This is marked as `CPU25_10-critical-SQE-OK`.
> 
> Tested on Linux/x86_64 with tier1 tests and 
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk/sun/security                         659   659     0     0   
> ==============================
> TEST SUCCESS

This pull request has now been integrated.

Changeset: 5173435b
Author:    Antonio Vieiro <avieiro at openjdk.org>
URL:       https://git.openjdk.org/jdk11u-dev/commit/5173435bfd0db5db0113a6209f2f827b16598596
Stats:     503 lines in 12 files changed: 0 ins; 491 del; 12 mod

8361212: Remove AffirmTrust root CAs

Reviewed-by: sgehwolf
Backport-of: d21c6cf5986b699ec56922ebc109e176cf56733e

-------------

PR: https://git.openjdk.org/jdk11u-dev/pull/3075