git: openjdk/jdk8u: 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

[Andrew John Hughes]

Changeset: 39221f82
Branch: master
Author:    Francisco Ferrari Bihurriet <fferrari at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
Date:      2024-09-20 10:44:37 +0000
URL:       https://git.openjdk.org/jdk8u/commit/39221f82e5b7efbc60191fe199e41428667b48d8

8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

Reviewed-by: sgehwolf, andrew
Backport-of: 7d49c52272b54070a13b02708dd7ce5f8e375a06

! jdk/src/share/classes/sun/security/validator/CADistrustPolicy.java
+ jdk/src/share/classes/sun/security/validator/EntrustTLSPolicy.java
! jdk/src/share/lib/security/java.security-aix
! jdk/src/share/lib/security/java.security-linux
! jdk/src/share/lib/security/java.security-macosx
! jdk/src/share/lib/security/java.security-solaris
! jdk/src/share/lib/security/java.security-windows
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/Distrust.java
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustcommercialca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustnetworkingca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustpremiumca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/affirmtrustpremiumeccca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/entrust2048ca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustevca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcaec1-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcag2-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/Entrust/entrustrootcag4-chain.pem