JDK-8256421 : Add 2 HARICA roots to cacerts truststore
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed. Resolved: Release in which this issue/RFE has been resolved. Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
Include 2 new HARICA roots to cacerts truststore
HARICA Root CA 2015
HARICA ECC Root CA 2015
Fix request (13u):
Request to port for parity with LTS releases.
The patch doesn't require adjustments here, too.
Fix request (15u):
to port for parity with LTS. For some reason the patch goes clean in jdk15u-dev even without JDK-8251989.
Fix Request (8u, critical)
Same reason as 11u. But, since this patch releases in other JDKs in April CPU, it makes sense to release it in 8u April CPU as well. Patch from 11u applies to 8u with usual shuffling. sun/security/lib/cacerts/VerifyCACerts.java and security/cert/CertPathValidator/certification/HaricaCA.java tests pass. This patch is different from 8u302, which accidentally put the HaricaCA.java in the wrong place, to be resolved in 8u302 later.
Fix Request (8u)
Same reason as 11u. Patch from 11u applies to 8u with usual shuffling. VerifyCACerts test passes.
Fix Request (jdk11u):
Should get backported for parity with 11.0.11-oracle. Doesn't apply cleanly. Review thread:
Fix Request (jdk16u):
This fix add two new root CA certificates from Harica. Backport is not clean as fix for JDK-8251989 is not in JDK 16. This fix updated VerifyCACerts.java test code.