RFR: 8341059: Change Entrust TLS distrust date to November 12, 2024

Sean Mullan mullan at openjdk.org
Fri Sep 27 16:49:34 UTC 2024


On Fri, 27 Sep 2024 16:22:04 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

> Please review this change to distrust TLS server certificates issued after November 11, 2024 and anchored by Entrust Root CAs. This is a follow up fix after JDK-8337664 to update only the distrust date. TLS server certificates issued before this date will continue to be valid until they expire. This restriction should have minimal compatibility impact since Entrust has announced they will be using a partner (SSL.com) for all TLS server certificates issued after Nov 11, 2024. The addition of these new TLS root certificates from SSL.com is tracked with https://bugs.openjdk.org/browse/JDK-8341057
> 
> See the CSR for more details: https://bugs.openjdk.org/browse/JDK-8341087

Marked as reviewed by mullan (Reviewer).

-------------

PR Review: https://git.openjdk.org/jdk/pull/21225#pullrequestreview-2334203094


More information about the security-dev mailing list