[jdk8u-dev] RFR: 8316138: Add GlobalSign 2 TLS root certificates
Zdenek Zambersky
zzambers at openjdk.org
Mon May 20 13:19:34 UTC 2024
Backport adds CA certificates. It is not clean, some changes were needed for jdk8u (cacerts file checksum, modified switch cases, in addition to different paths). Also test cases with `-Dcom.sun.security.ocsp.useget=false` parameter were removed in `CAInterop.java`, as property was introduced by [JDK-8328638](https://bugs.openjdk.org/browse/JDK-8328638) and is only JDK17+.
Testing:
Tests look OK. There are these 3 failures in CAInterop.java:
security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#digicerttlseccrootg5
security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#digicerttlsrsarootg5
security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#quovadisrootca1g3
these are not caused by this backport, I can see same 3 failures on [master](https://github.com/zzambers/jdk8u-dev/actions/runs/9158176705/job/25176394629) (probably appeared recently).
-------------
Commit messages:
- Backport 4083255440cfbf39b9683ea88a433d71ec6111e7
Changes: https://git.openjdk.org/jdk8u-dev/pull/502/files
Webrev: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=502&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8316138
Stats: 92 lines in 4 files changed: 89 ins; 0 del; 3 mod
Patch: https://git.openjdk.org/jdk8u-dev/pull/502.diff
Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/502/head:pull/502
PR: https://git.openjdk.org/jdk8u-dev/pull/502
More information about the jdk8u-dev
mailing list