Skip to content

Commit f16c950

Browse files
committed
8303770: Remove Baltimore root certificate expiring in May 2025
Backport-of: 2371696781edc040d8fa8133c78b284a2e3de1ed
1 parent c401a6e commit f16c950

File tree

2 files changed

+4
-34
lines changed

2 files changed

+4
-34
lines changed

src/java.base/share/data/cacerts/baltimorecybertrustca

Lines changed: 0 additions & 28 deletions
This file was deleted.

test/jdk/sun/security/lib/cacerts/VerifyCACerts.java

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
* Copyright (c) 2017, 2024, Oracle and/or its affiliates. All rights reserved.
2+
* Copyright (c) 2017, 2025, Oracle and/or its affiliates. All rights reserved.
33
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
44
*
55
* This code is free software; you can redistribute it and/or modify it
@@ -28,7 +28,7 @@
2828
* 8223499 8225392 8232019 8234245 8233223 8225068 8225069 8243321 8243320
2929
* 8243559 8225072 8258630 8259312 8256421 8225081 8225082 8225083 8245654
3030
* 8305975 8304760 8307134 8295894 8314960 8317373 8317374 8318759 8319187
31-
* 8321408 8316138 8341057
31+
* 8321408 8316138 8341057 8303770
3232
* @summary Check root CA entries in cacerts file
3333
*/
3434
import java.io.ByteArrayInputStream;
@@ -47,12 +47,12 @@ public class VerifyCACerts {
4747
+ File.separator + "security" + File.separator + "cacerts";
4848

4949
// The numbers of certs now.
50-
private static final int COUNT = 112;
50+
private static final int COUNT = 111;
5151

5252
// SHA-256 of cacerts, can be generated with
5353
// shasum -a 256 cacerts | sed -e 's/../&:/g' | tr '[:lower:]' '[:upper:]' | cut -c1-95
5454
private static final String CHECKSUM
55-
= "21:68:E7:16:5B:94:23:D2:60:5C:BB:F2:AF:C1:66:5C:EC:36:BC:20:FF:5C:54:AF:91:D1:2C:38:AE:55:D3:27";
55+
= "F1:A9:C7:FE:48:ED:D7:AF:84:C8:9D:C3:88:8D:A3:C8:45:E5:37:4D:B9:18:86:97:AE:CF:6D:41:E6:0E:FB:1B";
5656

5757
// Hex formatter to upper case with ":" delimiter
5858
private static final HexFormat HEX = HexFormat.ofDelimiter(":").withUpperCase();
@@ -95,8 +95,6 @@ public class VerifyCACerts {
9595
"68:7F:A4:51:38:22:78:FF:F0:C8:B1:1F:8D:43:D5:76:67:1C:6E:B2:BC:EA:B4:13:FB:83:D9:65:D0:6D:2F:F2");
9696
put("addtrustqualifiedca [jdk]",
9797
"80:95:21:08:05:DB:4B:BC:35:5E:44:28:D8:FD:6E:C2:CD:E3:AB:5F:B9:7A:99:42:98:8E:B8:F4:DC:D0:60:16");
98-
put("baltimorecybertrustca [jdk]",
99-
"16:AF:57:A9:F6:76:B0:AB:12:60:95:AA:5E:BA:DE:F2:2A:B3:11:19:D6:44:AC:95:CD:4B:93:DB:F3:F2:6A:EB");
10098
put("digicertglobalrootca [jdk]",
10199
"43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61");
102100
put("digicertglobalrootg2 [jdk]",

0 commit comments

Comments
 (0)