From andrew at openjdk.org  Sat Dec  2 00:38:28 2023
From: andrew at openjdk.org (Andrew John Hughes)
Date: Sat, 2 Dec 2023 00:38:28 GMT
Subject: git: openjdk/jdk8u-dev: 8308592: Framework for CA interoperability
 testing
Message-ID: <f2ba03bd-1ecf-44fa-958f-d95e35216cbd@openjdk.org>

Changeset: b610be3d
Author:    Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-02 00:36:43 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/b610be3da454727b1b22631f24beab165777d6a9

8308592: Framework for CA interoperability testing
8272708: [Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled
8288132: Update test artifacts in QuoVadis CA interop tests
8268678: LetsEncryptCA.java test fails as Let?s Encrypt Authority X3 is retired
8270280: security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java  OCSP response error

Reviewed-by: sgehwolf
Backport-of: c4faab66933b5977a466f28c31cba9fc099c8fb4

- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CertignaCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CertignaRoots.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/ComodoCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/EntrustCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/GlobalSignR6CA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/GoDaddyCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/GoogleCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/MicrosoftTLS.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/QuoVadisCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/SSLCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/TWCAGlobalCA.java
- jdk/test/security/infra/java/security/cert/CertPathValidator/certification/TeliaSoneraCA.java
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/ValidatePathWithURL.java


From sgehwolf at openjdk.org  Tue Dec  5 16:36:28 2023
From: sgehwolf at openjdk.org (Severin Gehwolf)
Date: Tue, 5 Dec 2023 16:36:28 GMT
Subject: git: openjdk/jdk8u-dev: 8315757: [8u] Add cacerts JTREG tests to GHA
 tier1 test set
Message-ID: <b67055e8-410a-4b8b-8112-2b9149b4a208@openjdk.org>

Changeset: 74a3dddd
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2023-12-05 16:34:44 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/74a3ddddd7784b513911bedb999c967fbed92e92

8315757: [8u] Add cacerts JTREG tests to GHA tier1 test set

Reviewed-by: phh, andrew

! jdk/test/TEST.groups


From serb at openjdk.org  Fri Dec  8 18:05:35 2023
From: serb at openjdk.org (Sergey Bylokhov)
Date: Fri, 8 Dec 2023 18:05:35 GMT
Subject: git: openjdk/jdk8u-dev: 8301310: The SendRawSysexMessage test may
 cause a JVM crash
Message-ID: <b33c3021-49aa-4a2f-964d-764bc65bbbd6@openjdk.org>

Changeset: 3db93fce
Author:    Sergey Bylokhov <serb at openjdk.org>
Date:      2023-12-08 18:05:12 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/3db93fcef419c4fe5bcc6fadfb3203a10a9d85f2

8301310: The SendRawSysexMessage test may cause a JVM crash

Reviewed-by: andrew
Backport-of: d725b73df01ae4478dfaabc47c48cd7231d91afa

! jdk/src/share/native/com/sun/media/sound/MidiOutDevice.c
! jdk/test/javax/sound/midi/SysexMessage/SendRawSysexMessage.java


From sgehwolf at openjdk.org  Mon Dec 11 10:44:45 2023
From: sgehwolf at openjdk.org (Severin Gehwolf)
Date: Mon, 11 Dec 2023 10:44:45 GMT
Subject: git: openjdk/jdk8u-dev: 8317373: Add Telia Root CA v2
Message-ID: <2517b699-e67d-4b68-8c88-c1df8e7053e2@openjdk.org>

Changeset: fc8c4008
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2023-12-11 10:41:16 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/fc8c4008c46a41fbd83a5d41de69e8532a4f5b23

8317373: Add Telia Root CA v2

Reviewed-by: phh, andrew
Backport-of: d3ebb4a155be8ed93e79b6b58c645e861ec30267

+ jdk/make/data/cacerts/teliarootcav2
! jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java


From sgehwolf at openjdk.org  Mon Dec 11 15:45:05 2023
From: sgehwolf at openjdk.org (Severin Gehwolf)
Date: Mon, 11 Dec 2023 15:45:05 GMT
Subject: git: openjdk/jdk8u-dev: 8317374: Add Let's Encrypt ISRG Root X2
Message-ID: <91c2c873-c50a-4c40-8c54-094b375d6547@openjdk.org>

Changeset: 4d1c3a6c
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2023-12-11 15:43:12 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/4d1c3a6c39a8630968e83cfd2b71dc0c3c938eaf

8317374: Add Let's Encrypt ISRG Root X2

Reviewed-by: phh, andrew
Backport-of: e6f46a43268808d0cbbb3bb93c73aa8e4cbfad83

+ jdk/make/data/cacerts/letsencryptisrgx2
! jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java


From sgehwolf at openjdk.org  Mon Dec 11 19:23:48 2023
From: sgehwolf at openjdk.org (Severin Gehwolf)
Date: Mon, 11 Dec 2023 19:23:48 GMT
Subject: git: openjdk/jdk8u-dev: 8318759: Add four DigiCert root certificates
Message-ID: <883cacea-415c-4354-b63f-c38506c963ba@openjdk.org>

Changeset: 7098ac7b
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2023-12-11 19:23:26 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/7098ac7ba63ab08d96605caf25173848111fd0db

8318759: Add four DigiCert root certificates

Reviewed-by: phh, andrew
Backport-of: 0ea58048f9b4cdaaa0470b2bcc03913fb3939453

+ jdk/make/data/cacerts/digicertcseccrootg5
+ jdk/make/data/cacerts/digicertcsrsarootg5
+ jdk/make/data/cacerts/digicerttlseccrootg5
+ jdk/make/data/cacerts/digicerttlsrsarootg5
! jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/DigicertCSRootG5.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java


From sgehwolf at openjdk.org  Wed Dec 13 15:00:29 2023
From: sgehwolf at openjdk.org (Severin Gehwolf)
Date: Wed, 13 Dec 2023 15:00:29 GMT
Subject: git: openjdk/jdk8u-dev: 8319187: Add three eMudhra emSign roots
Message-ID: <f70c0ba6-fe97-4d0e-8917-b8c5dafe46da@openjdk.org>

Changeset: 31162fb2
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2023-12-13 14:58:02 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/31162fb2760d01e1fd4a84bcb796400d95c82506

8319187: Add three eMudhra emSign roots

Reviewed-by: andrew
Backport-of: 0bda467f6e29c866c661e88a76a9fe3efc0a0d19

+ jdk/make/data/cacerts/emsigneccrootcag3
+ jdk/make/data/cacerts/emsignrootcag1
+ jdk/make/data/cacerts/emsignrootcag2
! jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/EmSignRootG2CA.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java


From abakhtin at openjdk.org  Fri Dec 15 20:10:41 2023
From: abakhtin at openjdk.org (Alexey Bakhtin)
Date: Fri, 15 Dec 2023 20:10:41 GMT
Subject: git: openjdk/jdk8u-dev: 8302017: Allocate BadPaddingException only if
 it will be thrown
Message-ID: <9e911d4f-ce02-4e09-93a5-6d187441bbc6@openjdk.org>

Changeset: 2131e407
Author:    Alexey Bakhtin <abakhtin at openjdk.org>
Date:      2023-12-15 20:08:18 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/2131e40736a1c6e0dceb25fb0d27ff80d9dcb497

8302017: Allocate BadPaddingException only if it will be thrown

Reviewed-by: mbalao, andrew
Backport-of: 334b977259930368160db705c1f2feda0b0e8707

! jdk/src/share/classes/com/sun/crypto/provider/RSACipher.java
! jdk/src/share/classes/sun/security/pkcs11/P11Signature.java
! jdk/src/share/classes/sun/security/rsa/RSAPadding.java
! jdk/src/share/classes/sun/security/rsa/RSASignature.java
+ jdk/test/sun/security/rsa/RSAPaddingCheck.java


From abakhtin at openjdk.org  Sat Dec 16 19:30:17 2023
From: abakhtin at openjdk.org (Alexey Bakhtin)
Date: Sat, 16 Dec 2023 19:30:17 GMT
Subject: git: openjdk/jdk8u-dev: 8320597: RSA signature verification fails on
 signed data that does not encode params correctly
Message-ID: <99f88bed-ae67-4950-97db-e65139461306@openjdk.org>

Changeset: a645ef48
Author:    Alexey Bakhtin <abakhtin at openjdk.org>
Date:      2023-12-16 19:28:58 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/a645ef48c572e5b06710ae9d49bc4459ad1fa0f2

8320597: RSA signature verification fails on signed data that does not encode params correctly

Reviewed-by: sgehwolf, mbalao, andrew
Backport-of: 11e4a925bec3c1f79e03045d48def53188b655e6

! jdk/src/share/classes/sun/security/rsa/RSASignature.java
+ jdk/test/sun/security/rsa/WithoutNULL.java


From andrew at openjdk.org  Mon Dec 18 02:01:04 2023
From: andrew at openjdk.org (Andrew John Hughes)
Date: Mon, 18 Dec 2023 02:01:04 GMT
Subject: git: openjdk/jdk8u: 4 new changesets
Message-ID: <3a28fc63-e9aa-45f4-82c3-442665cc39b2@openjdk.org>

Changeset: c9f02f15
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-11 10:41:16 +0000
URL:       https://git.openjdk.org/jdk8u/commit/c9f02f1514ef4ff964b1315221ed22a37d844dab

8317373: Add Telia Root CA v2

Reviewed-by: phh, andrew
Backport-of: d3ebb4a155be8ed93e79b6b58c645e861ec30267

+ jdk/make/data/cacerts/teliarootcav2
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: d68d0963
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-11 15:43:12 +0000
URL:       https://git.openjdk.org/jdk8u/commit/d68d0963b5914de66eb0c6bd1988393c408f3c9b

8317374: Add Let's Encrypt ISRG Root X2

Reviewed-by: phh, andrew
Backport-of: e6f46a43268808d0cbbb3bb93c73aa8e4cbfad83

+ jdk/make/data/cacerts/letsencryptisrgx2
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: 79adfc1a
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-11 19:23:26 +0000
URL:       https://git.openjdk.org/jdk8u/commit/79adfc1a5d17a9cb3b4b85c0bcfc36439c4bf18f

8318759: Add four DigiCert root certificates

Reviewed-by: phh, andrew
Backport-of: 0ea58048f9b4cdaaa0470b2bcc03913fb3939453

+ jdk/make/data/cacerts/digicertcseccrootg5
+ jdk/make/data/cacerts/digicertcsrsarootg5
+ jdk/make/data/cacerts/digicerttlseccrootg5
+ jdk/make/data/cacerts/digicerttlsrsarootg5
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/DigicertCSRootG5.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: 9c9d6b26
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-13 14:58:02 +0000
URL:       https://git.openjdk.org/jdk8u/commit/9c9d6b267c41e4c713cacc41befb66007cdb2601

8319187: Add three eMudhra emSign roots

Reviewed-by: andrew
Backport-of: 0bda467f6e29c866c661e88a76a9fe3efc0a0d19

+ jdk/make/data/cacerts/emsigneccrootcag3
+ jdk/make/data/cacerts/emsignrootcag1
+ jdk/make/data/cacerts/emsignrootcag2
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/EmSignRootG2CA.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java


From andrew at openjdk.org  Mon Dec 18 02:01:13 2023
From: andrew at openjdk.org (Andrew John Hughes)
Date: Mon, 18 Dec 2023 02:01:13 GMT
Subject: git: openjdk/jdk8u: Added tag jdk8u402-b05 for changeset 9c9d6b26
Message-ID: <1d97ef81-cb33-47d7-a27e-1e3108054ab7@openjdk.org>

Tagged by: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-16 20:22:01 +0000

Added tag jdk8u402-b05 for changeset 9c9d6b267c4
Changeset: 9c9d6b26
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-13 14:58:02 +0000
URL:       https://git.openjdk.org/jdk8u/commit/9c9d6b267c41e4c713cacc41befb66007cdb2601


From andrew at openjdk.org  Mon Dec 18 13:58:11 2023
From: andrew at openjdk.org (Andrew John Hughes)
Date: Mon, 18 Dec 2023 13:58:11 GMT
Subject: git: openjdk/jdk8u-dev: 5 new changesets
Message-ID: <8d4069cc-20a5-47a5-978e-cd1010cad224@openjdk.org>

Changeset: c9f02f15
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-11 10:41:16 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/c9f02f1514ef4ff964b1315221ed22a37d844dab

8317373: Add Telia Root CA v2

Reviewed-by: phh, andrew
Backport-of: d3ebb4a155be8ed93e79b6b58c645e861ec30267

+ jdk/make/data/cacerts/teliarootcav2
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: d68d0963
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-11 15:43:12 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/d68d0963b5914de66eb0c6bd1988393c408f3c9b

8317374: Add Let's Encrypt ISRG Root X2

Reviewed-by: phh, andrew
Backport-of: e6f46a43268808d0cbbb3bb93c73aa8e4cbfad83

+ jdk/make/data/cacerts/letsencryptisrgx2
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: 79adfc1a
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-11 19:23:26 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/79adfc1a5d17a9cb3b4b85c0bcfc36439c4bf18f

8318759: Add four DigiCert root certificates

Reviewed-by: phh, andrew
Backport-of: 0ea58048f9b4cdaaa0470b2bcc03913fb3939453

+ jdk/make/data/cacerts/digicertcseccrootg5
+ jdk/make/data/cacerts/digicertcsrsarootg5
+ jdk/make/data/cacerts/digicerttlseccrootg5
+ jdk/make/data/cacerts/digicerttlsrsarootg5
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/DigicertCSRootG5.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: 9c9d6b26
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-13 14:58:02 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/9c9d6b267c41e4c713cacc41befb66007cdb2601

8319187: Add three eMudhra emSign roots

Reviewed-by: andrew
Backport-of: 0bda467f6e29c866c661e88a76a9fe3efc0a0d19

+ jdk/make/data/cacerts/emsigneccrootcag3
+ jdk/make/data/cacerts/emsignrootcag1
+ jdk/make/data/cacerts/emsignrootcag2
+ jdk/test/security/infra/java/security/cert/CertPathValidator/certification/EmSignRootG2CA.java
! jdk/test/sun/security/lib/cacerts/VerifyCACerts.java

Changeset: d898d401
Author:    Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-18 13:57:02 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/d898d4018e0a16f2115f4b1cbf93eb5e653b789b

Merge



From andrew at openjdk.org  Mon Dec 18 15:46:00 2023
From: andrew at openjdk.org (Andrew John Hughes)
Date: Mon, 18 Dec 2023 15:46:00 GMT
Subject: git: openjdk/jdk8u-dev: Added tag jdk8u402-b05 for changeset 9c9d6b26
Message-ID: <220fc846-df2f-4674-b696-a73ed091b6ef@openjdk.org>

Tagged by: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-16 20:22:01 +0000

Added tag jdk8u402-b05 for changeset 9c9d6b267c4
Changeset: 9c9d6b26
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2023-12-13 14:58:02 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/9c9d6b267c41e4c713cacc41befb66007cdb2601