[jdk8u-dev] RFR: 8316138: Add GlobalSign 2 TLS root certificates

Zdenek Zambersky zzambers at openjdk.org
Mon May 20 13:19:34 UTC 2024


Backport adds CA certificates. It is not clean, some changes were needed for jdk8u (cacerts file checksum, modified switch cases, in addition to different paths). Also test cases with `-Dcom.sun.security.ocsp.useget=false` parameter were removed in `CAInterop.java`, as property was introduced by [JDK-8328638](https://bugs.openjdk.org/browse/JDK-8328638) and is only JDK17+.

Testing:
Tests look OK. There are these 3 failures in CAInterop.java:

security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#digicerttlseccrootg5 
security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#digicerttlsrsarootg5 
security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#quovadisrootca1g3 

these are not caused by this backport, I can see same 3 failures on [master](https://github.com/zzambers/jdk8u-dev/actions/runs/9158176705/job/25176394629) (probably appeared recently).

-------------

Commit messages:
 - Backport 4083255440cfbf39b9683ea88a433d71ec6111e7

Changes: https://git.openjdk.org/jdk8u-dev/pull/502/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=502&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8316138
  Stats: 92 lines in 4 files changed: 89 ins; 0 del; 3 mod
  Patch: https://git.openjdk.org/jdk8u-dev/pull/502.diff
  Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/502/head:pull/502

PR: https://git.openjdk.org/jdk8u-dev/pull/502


More information about the jdk8u-dev mailing list