[jdk8u] RFR: 8350498: Remove two Camerfirma root CA certificates [v3]

[Antonio Vieiro]

On Tue, 3 Jun 2025 10:20:45 GMT, Antonio Vieiro <duke at openjdk.org> wrote:

>> Backport of [JDK-8350498](https://bugs.openjdk.org/browse/JDK-8350498) from 11 that removes two non root CA certificates no longer active.
>> 
>> The PR is on top of https://github.com/openjdk/jdk8u/pull/72 (for [JDK-8303770](https://bugs.openjdk.org/browse/JDK-8303770)) to avoid conflicts, since CHECKSUM in VerifyCACerts.java is modified by both issues.
>> 
>> Not clean, as file locations have changed between 8 and 11.
>> 
>> Test VerifyCACerts.java passes (retested in jdk8u):
>> 
>> 
>> Passed: security/infra/java/security/cert/CertPathValidator/certification/HaricaCA.java
>> Passed: sun/security/lib/cacerts/VerifyCACerts.java
>> 
>> 
>> Note: This PR was previously filed to 8u-dev ( https://github.com/openjdk/jdk8u-dev/pull/651 )  and was reviewed there. I've squashed the two commits there for an easier review here (and also rebased on #72 on top of 8u master).
>
> Antonio Vieiro has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:
> 
>  - Merge master
>  - Backport 8894d6ad1b83553a5c60af51fd2de2319fd1d6ec
>  - Backport c0e7aa6c122e88e0d749ac3e8edf2cda9c5f53da

The affected test  + VerifyCACerts.java` passes...


2025-06-03T10:30:44.5974732Z Passed: security/infra/java/security/cert/CertPathValidator/certification/EmSignRootG2CA.java
2025-06-03T10:30:46.5110095Z Passed: security/infra/java/security/cert/CertPathValidator/certification/HaricaCA.java
2025-06-03T10:30:47.0646283Z Passed: sun/security/lib/cacerts/VerifyCACerts.java
2025-06-03T10:30:47.0829010Z Test results: passed: 46; failed: 7

... some other fail but are unrelated (seem to be wrong/outdated OCSP endpoints, have been failing for a while now).


2025-06-03T10:30:49.8943508Z Report written to /home/runner/work/jdk8u/jdk8u/test-results/testoutput/jdk_security_infra/JTreport/html/report.html
2025-06-03T10:30:49.8946273Z Results written to /home/runner/work/jdk8u/jdk8u/test-results/testoutput/jdk_security_infra/JTwork
2025-06-03T10:30:49.8948048Z Error: Some tests failed or other problems occurred.
2025-06-03T10:30:49.9493215Z Summary: jdk_security_infra
2025-06-03T10:30:49.9494014Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#globalsigneccrootcar4
2025-06-03T10:30:49.9494799Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#gtsrootcar1
2025-06-03T10:30:49.9495769Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#gtsrootcar2
2025-06-03T10:30:49.9496496Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#gtsrootecccar3
2025-06-03T10:30:49.9497212Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#gtsrootecccar4
2025-06-03T10:30:49.9497937Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#quovadisrootca1g3
2025-06-03T10:30:49.9498923Z FAILED: security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java#quovadisrootca2g3
2025-06-03T10:30:49.9499504Z TEST STATS: name=jdk_security_infra  run=53  pass=46  fail=7

-------------

PR Comment: https://git.openjdk.org/jdk8u/pull/73#issuecomment-2934702111