RFR: JDK-8305211: Remove CA certificates that are expired

Sean Mullan mullan at openjdk.org
Thu Mar 30 11:57:17 UTC 2023


On Thu, 30 Mar 2023 04:56:37 GMT, Victor Rudometov <vrudomet at openjdk.org> wrote:

> Removed 6 CA certificates that are expired, updated VerifyCACerts test
> 
> Build passed, jtreg test VerifyCACerts passed.

These root certificates should not be removed. These root CAs have issued code signing certificates, which may still be in use if they were previously used to sign and timestamp Java code.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/13237#issuecomment-1490173577



More information about the security-dev mailing list