[jdk24u] RFR: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs
Antonio Vieiro
duke at openjdk.org
Wed Jan 29 11:31:44 UTC 2025
Clean backport of [JDK-8346587](https://bugs.openjdk.org/browse/JDK-8346587) to distrust TLS server certificates issued after April 15, 2025 and anchored by Camerfirma Root CAs. Low risk.
On Linux it passes tier1 tests and also all `jdk/sun/security` tests:
==============================
Test summary
==============================
TEST TOTAL PASS FAIL ERROR
jtreg:test/jdk/sun/security 798 798 0 0
==============================
TEST SUCCESS
-------------
Commit messages:
- Backport 907350e9e8e9b66365e9eaa3ae89ddc55cf9731f
Changes: https://git.openjdk.org/jdk24u/pull/40/files
Webrev: https://webrevs.openjdk.org/?repo=jdk24u&pr=40&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8346587
Stats: 392 lines in 8 files changed: 388 ins; 0 del; 4 mod
Patch: https://git.openjdk.org/jdk24u/pull/40.diff
Fetch: git fetch https://git.openjdk.org/jdk24u.git pull/40/head:pull/40
PR: https://git.openjdk.org/jdk24u/pull/40
More information about the jdk-updates-dev
mailing list