[jdk8u] RFR: 8350498: Remove two Camerfirma root CA certificates

Antonio Vieiro duke at openjdk.org
Tue Jun 3 08:56:05 UTC 2025


Backport of [JDK-8350498](https://bugs.openjdk.org/browse/JDK-8350498) from 11 that removes two non root CA certificates no longer active.

The PR is on top of https://github.com/openjdk/jdk8u/pull/72 (for [JDK-8303770](https://bugs.openjdk.org/browse/JDK-8303770)) to avoid conflicts, since CHECKSUM in VerifyCACerts.java is modified by both issues.

Not clean, as file locations have changed between 8 and 11.

Test VerifyCACerts.java passes (retested in jdk8u):


Passed: security/infra/java/security/cert/CertPathValidator/certification/HaricaCA.java
Passed: sun/security/lib/cacerts/VerifyCACerts.java


Note: This PR was previously filed to 8u-dev ( https://github.com/openjdk/jdk8u-dev/pull/651 )  and was reviewed there. I've squashed the two commits there for an easier review here (and also rebased on #72 on top of 8u master).

-------------

Depends on: https://git.openjdk.org/jdk8u/pull/72

Commit messages:
 - Backport 8894d6ad1b83553a5c60af51fd2de2319fd1d6ec

Changes: https://git.openjdk.org/jdk8u/pull/73/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk8u&pr=73&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8350498
  Stats: 236 lines in 7 files changed: 2 ins; 212 del; 22 mod
  Patch: https://git.openjdk.org/jdk8u/pull/73.diff
  Fetch: git fetch https://git.openjdk.org/jdk8u.git pull/73/head:pull/73

PR: https://git.openjdk.org/jdk8u/pull/73


More information about the jdk8u-dev mailing list