Skip to content

Commit c0e7aa6

Browse files
vieiroPaul Hohensee
authored and
Paul Hohensee
committed
8303770: Remove Baltimore root certificate expiring in May 2025
Backport-of: 4e67796c3fcbffa706be8fabb56d00f9128edac1
1 parent da5bfa9 commit c0e7aa6

File tree

2 files changed

+4
-34
lines changed

2 files changed

+4
-34
lines changed

make/data/cacerts/baltimorecybertrustca

Lines changed: 0 additions & 28 deletions
This file was deleted.

test/jdk/sun/security/lib/cacerts/VerifyCACerts.java

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
* Copyright (c) 2017, 2024, Oracle and/or its affiliates. All rights reserved.
2+
* Copyright (c) 2017, 2025, Oracle and/or its affiliates. All rights reserved.
33
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
44
*
55
* This code is free software; you can redistribute it and/or modify it
@@ -28,7 +28,7 @@
2828
* 8223499 8225392 8232019 8234245 8233223 8225068 8225069 8243321 8243320
2929
* 8243559 8225072 8258630 8259312 8256421 8225081 8225082 8225083 8245654
3030
* 8305975 8304760 8307134 8295894 8314960 8317373 8317374 8318759 8319187
31-
* 8321408 8316138 8341057
31+
* 8321408 8316138 8341057 8303770
3232
* @summary Check root CA entries in cacerts file
3333
*/
3434
import java.io.ByteArrayInputStream;
@@ -47,12 +47,12 @@ public class VerifyCACerts {
4747
+ File.separator + "security" + File.separator + "cacerts";
4848

4949
// The numbers of certs now.
50-
private static final int COUNT = 112;
50+
private static final int COUNT = 111;
5151

5252
// SHA-256 of cacerts, can be generated with
5353
// shasum -a 256 cacerts | sed -e 's/../&:/g' | tr '[:lower:]' '[:upper:]' | cut -c1-95
5454
private static final String CHECKSUM
55-
= "8F:E0:6F:7F:21:59:33:A6:43:F3:48:FD:A3:4A:8E:28:35:AA:DD:6E:A5:43:56:F1:28:34:48:DF:5C:D2:7C:72";
55+
= "B7:60:5A:7A:01:0A:9F:47:E3:46:B9:30:E1:FC:A2:71:69:58:76:CB:8C:85:2B:FF:1A:D5:92:71:AF:F5:60:8F";
5656

5757
// map of cert alias to SHA-256 fingerprint
5858
@SuppressWarnings("serial")
@@ -92,8 +92,6 @@ public class VerifyCACerts {
9292
"68:7F:A4:51:38:22:78:FF:F0:C8:B1:1F:8D:43:D5:76:67:1C:6E:B2:BC:EA:B4:13:FB:83:D9:65:D0:6D:2F:F2");
9393
put("addtrustqualifiedca [jdk]",
9494
"80:95:21:08:05:DB:4B:BC:35:5E:44:28:D8:FD:6E:C2:CD:E3:AB:5F:B9:7A:99:42:98:8E:B8:F4:DC:D0:60:16");
95-
put("baltimorecybertrustca [jdk]",
96-
"16:AF:57:A9:F6:76:B0:AB:12:60:95:AA:5E:BA:DE:F2:2A:B3:11:19:D6:44:AC:95:CD:4B:93:DB:F3:F2:6A:EB");
9795
put("digicertglobalrootca [jdk]",
9896
"43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61");
9997
put("digicertglobalrootg2 [jdk]",

0 commit comments

Comments
 (0)