[jdk21u-dev] RFR: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Andrew John Hughes]

On Thu, 6 Feb 2025 10:02:04 GMT, Antonio Vieiro <duke at openjdk.org> wrote:

> Clean backport of [JDK-8346587](https://bugs.openjdk.org/browse/JDK-8346587) to distrust TLS server certificates issued after April 15, 2025 and anchored by Camerfirma Root CAs. Low risk.
> 
> It passes tier1 tests and also all jdk/sun/security tests:
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk/sun/security                         795   795     0     0   
> ==============================
> TEST SUCCESS

Backport confirmed clean and tests pass.

-------------

Marked as reviewed by andrew (Reviewer).

PR Review: https://git.openjdk.org/jdk21u-dev/pull/1388#pullrequestreview-2610630316