[jdk24u] RFR: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Tue Feb 4 07:17:21 UTC 2025

On Wed, 29 Jan 2025 11:25:16 GMT, Antonio Vieiro <duke at openjdk.org> wrote:

> Clean backport of [JDK-8346587](https://bugs.openjdk.org/browse/JDK-8346587) to distrust TLS server certificates issued after April 15, 2025 and anchored by Camerfirma Root CAs. Low risk.
> 
> On Linux it passes tier1 tests and also all `jdk/sun/security` tests:
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk/sun/security                         798   798     0     0   
> ==============================
> TEST SUCCESS

@vieiro 
Your change (at version 99237c9559d05b1106bcfbb0da9dd18d8f39b99c) is now ready to be sponsored by a Committer.

-------------

PR Comment: https://git.openjdk.org/jdk24u/pull/40#issuecomment-2633063615