<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="ltr" style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Dear OpenJDK Security Team,</div>
<div id="ms-outlook-mobile-signature">
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">I would like to request the inclusion of the following HARICA root certificates in the default OpenJDK
<code>cacerts</code> truststore:</span></p>
<ul data-start="472" data-end="541" style="text-align: left;">
<li style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p role="presentation"><b>HARICA TLS RSA Root CA 2021</b></p>
</li><li style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<p role="presentation"><b>HARICA TLS ECC Root CA 2021</b></p>
</li></ul>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">These roots are part of HARICA’s 2021 TLS Root hierarchy and are already included in all major trust programs (Apple, Microsoft,
Mozilla, Google, Oracle) and in modern operating system trust stores. However, they do not appear to be present in the current OpenJDK
<code>cacerts</code> file, while the older HARICA 2015 roots are included (added under JDK-8260597).</span></p>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">This absence causes Java applications to fail TLS validation when connecting to services that use certificates issued under the
2021 HARICA hierarchy.</span></p>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Thank you for your time and consideration.</span></p>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Kind regards,</span></p>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Martijn de Haar</span></p>
<div dir="ltr" style="text-align: left; text-indent: 0px; margin-top: 1em; margin-bottom: 1em; font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
<p style="text-align: left; text-indent: 0px;"><span style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
</div>
</body>
</html>