JDK-8243320 : Add SSL root certificates to Oracle Root CA program
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 8,11,15,16
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2020-04-21
  • Updated: 2022-06-27
  • Resolved: 2020-08-03
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 13 JDK 15 JDK 16 JDK 7 JDK 8 Other
11.0.10-oracleFixed 13.0.7Fixed 15.0.1Fixed 16 b09Fixed 7u281Fixed 8u271Fixed openjdk8u272Fixed
Sub Tasks
JDK-8250860 :  
Add the following 3 SSL roots to the Root CA program-

A copy of the root(s) to be included (see attachments or download from provided links)

RSA - https://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.cer

EV RSA - https://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.pem

ECC - https://www.ssl.com/repository/SSLcomRootCertificationAuthorityECC.cer

Fix request (13u): porting this fix would make 13u closer to LTS releases and 15. Applies clean, tests run OK.

Fix Request (8u) This improves CA list and keeps codebases in sync (I see 8u271). Patch applies with the usual reshuffles. Notably, SSLCA.java needs to go where other CertPathValidator/certification tests go. New VerifyCA test fails without cert additions, passes with it.

jdk11 backport request I would like to have the fix in openjdk11 as well, for better parity with 11.0.9-oracle . The patch applies cleanly.

Fix Request (15u) Requesting to backport (15.0.1) this fix to add new SSL root CA certificates to cacerts store. The patch applies cleanly and tests pass.

URL: https://hg.openjdk.java.net/jdk/jdk/rev/05913f2d8e67 User: rhalade Date: 2020-08-03 18:35:48 +0000