[jdk21u-dev] RFR: 8303770: Remove Baltimore root certificate expiring in May 2025

Thu Mar 13 10:55:07 UTC 2025

On Wed, 12 Mar 2025 20:21:22 GMT, Severin Gehwolf <sgehwolf at openjdk.org> wrote:

> Backport of a required removal of an expired certificate. 21.0.8-oracle parity.

Testing:

- [x] GHA
- [x] `test/jdk/sun/security/lib/cacerts/VerifyCACerts.java` has the warning `WARNING: cert "baltimorecybertrustca [jdk]" expiry "Tue May 13 01:59:00 CEST 2025" will expire within 90 days` prior this patch and is gone after.
- [x] `test/jdk/sun/security/ssl` tests. All pass.

-------------

PR Comment: https://git.openjdk.org/jdk21u-dev/pull/1480#issuecomment-2720817724