[jdk8u] RFR: 8350498: Remove two Camerfirma root CA certificates [v3]

[Severin Gehwolf]

On Tue, 3 Jun 2025 10:20:45 GMT, Antonio Vieiro <duke at openjdk.org> wrote:

>> Backport of [JDK-8350498](https://bugs.openjdk.org/browse/JDK-8350498) from 11 that removes two non root CA certificates no longer active.
>> 
>> The PR is on top of https://github.com/openjdk/jdk8u/pull/72 (for [JDK-8303770](https://bugs.openjdk.org/browse/JDK-8303770)) to avoid conflicts, since CHECKSUM in VerifyCACerts.java is modified by both issues.
>> 
>> Not clean, as file locations have changed between 8 and 11.
>> 
>> Test VerifyCACerts.java passes (retested in jdk8u):
>> 
>> 
>> Passed: security/infra/java/security/cert/CertPathValidator/certification/HaricaCA.java
>> Passed: sun/security/lib/cacerts/VerifyCACerts.java
>> 
>> 
>> Note: This PR was previously filed to 8u-dev ( https://github.com/openjdk/jdk8u-dev/pull/651 )  and was reviewed there. I've squashed the two commits there for an easier review here (and also rebased on #72 on top of 8u master).
>
> Antonio Vieiro has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:
> 
>  - Merge master
>  - Backport 8894d6ad1b83553a5c60af51fd2de2319fd1d6ec
>  - Backport c0e7aa6c122e88e0d749ac3e8edf2cda9c5f53da

Marked as reviewed by sgehwolf (Reviewer).

-------------

PR Review: https://git.openjdk.org/jdk8u/pull/73#pullrequestreview-2892395480