[8u] Request for enhancement backport approval for CR 8207258- Distrust TLS server certificates anchored by Symantec Root CAs

[Liu, Xin]

Hi, jdk8u maintainers,

We backport two patches about distrust policy to jdk8u-dev.  It will distrust all certificates from Symantec except for 2 from Apple’s.
They are straight-forward, but we do minor changes for java8.

JDK-8207258<https://bugs.openjdk.java.net/browse/JDK-8207258>: Distrust TLS server certificates anchored by Symantec Root CAs
http://cr.openjdk.java.net/~phh/8207258/webrev.8u.00/

JDK-8216280<https://bugs.openjdk.java.net/browse/JDK-8216280%5d>: Allow later Symantec Policy distrust date for two Apple SubCAs
http://cr.openjdk.java.net/~phh/8216280/webrev.8u.00/

We verify Jtreg and JCK8b internally. Could you mailist review it?

Thanks,
--lx