[jdk8u-dev] RFR: 8341057: Add 2 SSL.com TLS roots

[Severin Gehwolf]

On Wed, 2 Oct 2024 01:42:21 GMT, Andrew John Hughes <andrew at openjdk.org> wrote:

> Hi all,
> 
> This pull request contains a backport of commit [217b9fdf](https://github.com/openjdk/jdk11u/commit/217b9fdf056f4887230f60fdf60b036861699cd8) from the [openjdk/jdk11u](https://git.openjdk.org/jdk11u) repository.
> 
> The commit being backported was authored by Goetz Lindenmaier on 1st of October, 2024 and was reviewed by Matthias Baesken.
> 
> The patch applied as is to 8u once path shuffled. All enabled `security/infra/java/security/cert/CertPathValidator/certification` tests pass, including the new `ssltlsrootecc2022` and `ssltlsrootrsa2022`. These new certificates [will be used as the issuing CA by Entrust after the 12th of November](https://bugs.openjdk.org/browse/JDK-8341087).

jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java line 495:

> 493:  * @run main/othervm/manual -Djava.security.debug=certpath,ocsp CAInterop ssltlsrootecc2022 DEFAULT
> 494:  * @run main/othervm/manual -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop ssltlsrootecc2022 DEFAULT
> 495:  * @run main/othervm/manual -Djava.security.debug=certpath CAInterop ssltlsrootecc2022 CRL

In 8u we usually run those tests (not specifying them as manual). That's why they weren't run in GHA. Please remove `/manual`.

jdk/test/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java line 506:

> 504:  * @run main/othervm/manual -Djava.security.debug=certpath,ocsp CAInterop ssltlsrootrsa2022 DEFAULT
> 505:  * @run main/othervm/manual -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop ssltlsrootrsa2022 DEFAULT
> 506:  * @run main/othervm/manual -Djava.security.debug=certpath CAInterop ssltlsrootrsa2022 CRL

Same here. Remove `/manual`

-------------

PR Review Comment: https://git.openjdk.org/jdk8u-dev/pull/589#discussion_r1784362089
PR Review Comment: https://git.openjdk.org/jdk8u-dev/pull/589#discussion_r1784362533