[jdk8u] RFR: 8295894: Remove SECOM certificate that is expiring in September 2023

Andrew John Hughes andrew at openjdk.org
Fri Sep 8 17:48:48 UTC 2023


On Wed, 6 Sep 2023 09:32:37 GMT, Severin Gehwolf <sgehwolf at openjdk.org> wrote:

> Low risk backport of JDK-8295894 which removes an expired certificate from cacerts. It expires in September and we should get it into 8u392. Patch is a clean backport modulo usual path changes to adjust to the 8u layout.
> 
> It's also a dependency so that the backport of JDK-8314960 (Add certigna 2 root CA) applies clean.
> 
> Testing:
> - [x] GHA
> - [x] `jdk/test/security/infra/java/security/cert/CertPathValidator` and  `jdk/test/sun/security/lib/cacerts`. Pass, except for `AmazonCA.java` which is being dealt with elsewhere: https://git.openjdk.org/jdk8u-dev/pull/364 and https://git.openjdk.org/jdk8u-dev/pull/365

Backport looks good to me. Approved for 8u392.

-------------

Marked as reviewed by andrew (Reviewer).

PR Review: https://git.openjdk.org/jdk8u/pull/48#pullrequestreview-1617985336


More information about the jdk8u-dev mailing list