JDK-8199779 : Add T-Systems, GlobalSign and Starfield services root certificates
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 11
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2018-03-19
  • Updated: 2019-05-14
  • Resolved: 2018-07-13
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 12 Other
11 b23Fixed 12Fixed openjdk8u222Fixed
Related Reports
Duplicate :  
Duplicate :  
Relates :  
Relates :  
Sub Tasks
JDK-8207191 :  
Description
The following T-System roots (identified by the keystore alias) should be added to the cacerts keystore in OpenJDK now that the proper agreements are in place: deutschetelekomrootca2, ttelesecglobalrootclass3ca, ttelesecglobalrootclass2ca

The Starfield Services Root Certificate Authority - G2 root should be added to OpenJDK. This root is owned by Amazon.
Alias is starfieldservicesrootg2ca

The following GlobalSign roots (identified by the keystore alias) should be added to the cacerts keystore in OpenJDK now that the proper agreements are in place: globalsignca, globalsignr3ca, globalsigneccrootcar5
Comments
Fix Request: Backport to OpenJDK 8 will be resolved with push for JDK-8189131.
02-05-2019

Both GlobalSign and Starfield are among the leaders in CA marketshare. Adding these now will eliminate the risk that TLS certs issued by these CAs won���t work out-of-the-box on OpenJDK 11 binaries.
02-07-2018

Late Enhancement Request: Justification: This fix is required to add CA to OpenJDK cacerts file. Oracle JDK had these CAs included so the risk is minimal. Estimate: 6th July 2018
02-07-2018