git: openjdk/jdk8u: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

[Severin Gehwolf]

Changeset: 41cefc71
Branch: master
Author:    Severin Gehwolf <sgehwolf at openjdk.org>
Date:      2025-03-14 10:13:55 +0000
URL:       https://git.openjdk.org/jdk8u/commit/41cefc713054d9b0cc16f77132d31bfbe34edbe2

8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs

Reviewed-by: andrew, fferrari
Backport-of: 8322c66efa9da9210eca7d6081d2a8c2d65ba4e0

! jdk/src/share/classes/sun/security/validator/CADistrustPolicy.java
+ jdk/src/share/classes/sun/security/validator/CamerfirmaTLSPolicy.java
! jdk/src/share/lib/security/java.security-aix
! jdk/src/share/lib/security/java.security-linux
! jdk/src/share/lib/security/java.security-macosx
! jdk/src/share/lib/security/java.security-solaris
! jdk/src/share/lib/security/java.security-windows
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/distrust/Camerfirma.java
! jdk/test/sun/security/ssl/X509TrustManagerImpl/distrust/Distrust.java
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachamberscommerceca-chain.pem
+ jdk/test/sun/security/ssl/X509TrustManagerImpl/distrust/chains/camerfirma/camerfirmachambersignca-chain.pem