[11u] RFR: 8243559: Remove root certificates with 1024-bit keys

[Doerr, Martin]

Hi,

JDK-8243559 is backported to 11.0.12-oracle. I'd like to backport it for parity.

I had to integrate changes to the test VerifyCACerts.java manually:
- Add bug ID.
- Adapt COUNT.
- Compute new CHECKSUM.
- Remove verisigntsaca and thawtepremiumserverca in the last hunk.

Bug:
https://bugs.openjdk.java.net/browse/JDK-8243559

Original change:
https://github.com/openjdk/jdk/commit/dbfeb90d

11u backport:
http://cr.openjdk.java.net/~mdoerr/8261209_xml_11u/webrev.00/

Please review.

Best regards,
Martin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20210315/bad73cde/attachment.htm>