[jdk8u-dev] RFR: 8317374: Add Let's Encrypt ISRG Root X2 [v5]

[Severin Gehwolf]

On Mon, 11 Dec 2023 13:38:32 GMT, Severin Gehwolf <sgehwolf at openjdk.org> wrote:

>> Backport so as to add the Let's Encrypt ISRG Root X2 CA. Applies clean after path shuffeling. Please review!
>> 
>> Testing:
>> - [x] GHA
>> - [x] `jdk/test/security/infra/java/security/cert/CertPathValidator` and  `jdk/test/sun/security/lib/cacerts` jtreg tests.
>
> Severin Gehwolf has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains one additional commit since the last revision:
> 
>   Backport e6f46a43268808d0cbbb3bb93c73aa8e4cbfad83

Linux x64 test failure of `security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#usertrusteccca` seems infra flakiness. We have seen it fail a couple of times now:


Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: OCSP response error: INTERNAL_ERROR

-------------

PR Comment: https://git.openjdk.org/jdk8u-dev/pull/398#issuecomment-1850193648