JDK-8243320 : Add SSL root certificates to Oracle Root CA program
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 8,11,15,16
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2020-04-21
  • Updated: 2024-11-13
  • Resolved: 2020-08-03
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 13 JDK 15 JDK 16 JDK 7 JDK 8 Other
11.0.10-oracleFixed 13.0.7Fixed 15.0.1Fixed 16 b09Fixed 7u281Fixed 8u271Fixed openjdk8u272Fixed
Sub Tasks
JDK-8250860 :  
Release Note: Added 3 SSL Corporation Root CA Certificates - Closed
Description
Add the following 3 SSL roots to the Root CA program-

A copy of the root(s) to be included (see attachments or download from provided links)


RSA - https://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.cer

EV RSA - https://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.pem

ECC - https://www.ssl.com/repository/SSLcomRootCertificationAuthorityECC.cer
Comments
Fix request (13u): porting this fix would make 13u closer to LTS releases and 15. Applies clean, tests run OK.
12-02-2021
Fix Request (8u) This improves CA list and keeps codebases in sync (I see 8u271). Patch applies with the usual reshuffles. Notably, SSLCA.java needs to go where other CertPathValidator/certification tests go. New VerifyCA test fails without cert additions, passes with it.
27-08-2020
jdk11 backport request I would like to have the fix in openjdk11 as well, for better parity with 11.0.9-oracle . The patch applies cleanly.
05-08-2020
Fix Request (15u) Requesting to backport (15.0.1) this fix to add new SSL root CA certificates to cacerts store. The patch applies cleanly and tests pass.
03-08-2020
URL: https://hg.openjdk.java.net/jdk/jdk/rev/05913f2d8e67 User: rhalade Date: 2020-08-03 18:35:48 +0000
03-08-2020